Attribute Query Handle. An opaque, anonymous identifier (analogous to a session id) that identifies a user who has authenticated to a Shibboleth Identity Provider. It does not uniquely identify a user across logins, nor does it remain consistent within an SSO session.