An X509 certificate whose associated public/private key pair is used by federation servers to digitally sign all security tokens that they produce.