A Microsoft specification for unifying identity management. It allows information such as identities, accounts, attributes, authentication, and authorization to be shared more securely between different trusted domains.