Errata exists for this version of the document.

A Server which verifies credentials provided by a Security Principal and returns a token which can be passed to an associated Authorization Service.