Topic

Authentication Tokens

Cryptographically protected credentials that assert a user's identity and permissions to a service, allowing a session to continue without repeated sign-in.

Current clusters

science1 publisher

NIST and CISA finalise token-protection guidance citing a single stolen signing key

NIST and CISA have finalised implementation guidance for the identity tokens behind single sign-on, written for federal agencies and their cloud providers. The case the announcement rests on is one cited attack.

Publishers:nist.gov

Reality

Evidence58
Adoption16
Hype gap+12
Incentives45
Confidence60