A Server which verifies credentials provided by a Security Principal and returns a token which can be passed to an associated Authorization Service.