A device used in network access control. It stores the usernames and passwords that identify the clients logging in, or it may hold the algorithms for token access (see authentication token). For access to specific network resources, the server may itself store user permissions and company policies or provide access to directories that contain the information.