The consumer's seam to its own sign-on.
public
provideAssertion(Cancellation $cancellation): IdentityAssertion
A currently valid identity assertion for the signed-in user, called once per grant.