A part of the key distribution center (KDC) that verifies the identity of a principal through a name and a password. If the identity is authenticated, the server issues a ticket-granting ticket.