Uniquely identifies a client in the Kerberos system and generally corresponds to a conventional username.