A mechanism-specific security credential that is issued to access a resource, which is used to obtain another credential for access to a different resource.