CISA and NIST Issue Guidance to Protect Cloud Identity Tokens

CISA and NIST issued final guidance to protect cloud identity tokens and assertions from theft, forgery and misuse. It is aimed at federal agencies, cloud service providers and organizations that purchase cloud services from them, and following it is voluntary.