A Security Token (or Access Token) is a data object containing security credentials for a session, identifying a user, user group(s), permissions, and other security information.