This object carries the MAC address of the client device involved in a web-authentication trap notification. It identifies exactly which end-user device triggered the event, letting an admin trace a specific login failure or logout back to a particular laptop or phone on the network. For example, a trap might report a client MAC address alongside reason code invalidUsername to identify the device that failed authentication.