standard

NIST IR 8587

Joint NIST and CISA interagency report titled "Protecting Tokens and Assertions from Forgery, Theft, and Misuse," giving implementation recommendations for agencies and cloud service providers on signing keys, token verification and token lifecycle controls.

Known aliases

IR 8587
Protecting Tokens and Assertions from Forgery, Theft, and Misuse

Relationships

No evidence-backed relationships are recorded.

Current clusters

security2 publishers

NIST and CISA finalize the token forgery guidance cloud customers can now cite

NIST and CISA have finalized IR 8587, guidance that spells out how signing keys, token verification and revocation are supposed to be handled in cloud identity systems.

Publishers:cisa.govhelpnetsecurity.com

Reality

Evidence74
Adoption14
Hype gap+16
Incentives38
Confidence71