The means used to confirm the identity of a user, process, or device (e.g., user password or token).
SOURCE: SP 800-53; CNSSI-4009
