Any on-premises, cloud-based, or hybrid service used to store, transmit, or manage authentication keys generated by syncable authenticators that are not local to the user’s device.
Sources:
NIST SP 800-63Bsup1
[Supplement to NIST SP 800-63B. Will be withdrawn when NIST SP 800-63B-4 is published]