Federation
Access Token
An Access Token is a token that allows an application to call a protected resource within a limited scope and duration.
Definition
An Access Token is the authorization-oriented token used by an application to access a resource or API on behalf of the authenticated user, within a constrained scope and lifetime. It is distinct from the ID token, whose role is identity verification rather than delegated resource access.
The Ariovis perspective
Tokens are part of an access architecture, not a substitute for identity governance or authorization. Their scope, lifetime, validation and revocation must match the risk of the API and user journey.
Related services
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.