The token is usually handed to the first area by a redirect and it consists of all the data necessary to discover the person for the area necessitating authentication. since the token is signed, it can not be modified in almost any way with the client. This is often essential to SSO protocols, which help identification verification to take place a