entity that manages identity information of users and provides authentication services to relying applications