CISA, NIST Finalize Cloud Identity Token Security Guidelines

The Cybersecurity and Infrastructure Security Agency (CISA) and National Institute of Standards and Technology (NIST) on Sept. 15 released final guidance to help federal agencies and cloud service providers (CSPs) protect identity and access tokens that support single sign-on, federation, and application programming interface access. The guidance incorporates feedback from nearly 250 public comments and builds on updates to NIST Special Publication 800-53.