Single sign-on systems work by authenticating users from a centralized location or using a centralized method, and then allowing applications that trust the system to grant those users access.

What would be passed between the authentication system and the applications to grant a user access?