Topic

Token and Assertion Security

Protection of the signed tokens and identity assertions that systems use to prove who or what is requesting access, covering signing key custody, verification, lifetimes and revocation.

Current clusters

security2 publishers

NIST and CISA finalize the token forgery guidance cloud customers can now cite

NIST and CISA have finalized IR 8587, guidance that spells out how signing keys, token verification and revocation are supposed to be handled in cloud identity systems.

Publishers:cisa.govhelpnetsecurity.com

Reality

Evidence74
Adoption14
Hype gap+16
Incentives38
Confidence71