Device identity refers to the unique, verifiable characteristics that allow an organization to recognize a device as legitimate. It is the foundation for determining whether a laptop, mobile phone, server, or IoT endpoint should be allowed to access corporate networks, applications, or data.