Final answer:
An application should connect to the Authorization server to retrieve security tokens.
Step-by-step explanation:
An application should connect to the Authorization server to retrieve security tokens.
Security tokens are typically used to authenticate and authorize users in an application. The Authorization server is responsible for issuing security tokens after successful authentication and verifying the authorization of the user requesting access.
The other options mentioned, Authentication server, Token server, and Identity server, are not incorrect, as they are also involved in the authentication and authorization process. However, the Authorization server is specifically responsible for issuing the security tokens.