 Tokens generically are something the claimant possesses and controls that may be used to authenticate the claimant's identity.In e-authentication, the claimant authenticates to a system or application over a network.Therefore, a token used for e-authentication is a secret and the token must be protected.