CISA and NIST Issue Guidance to Protect Cloud Identity Tokens

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have issued final guidance for protecting cloud identity tokens and assertions from theft, forgery and misuse, aimed at federal agencies, cloud service providers and the organizations that buy from them.

Interagency Report 8587 , published September 15, covers the tokens behind single sign-on (SSO), identity federation and application programming interface (API) access. The agencies said adversaries increasingly target them to move laterally and reach sensitive data.

Following the new guidance is voluntary.

What the Guidance Asks For

Access and identity tokens should be valid for no more than an hour, the report says, and expired tokens must be rejected outright by authorization services and policy enforcement points.

On key management, signing keys for high-impact systems should be rotated at least every 90 days, and within a year everywhere else. At moderate impact and above they must sit in hardware-backed or isolated storage, never persistently on the servers, virtual machines or containers using them. High-impact systems must also sign inside an isolated execution environment.

Keys must be scoped to the narrowest sensible boundary, and one valid outside a federally authorized environment must not sign tokens inside one.

Every token must carry an explicit audience field, and any access control mechanism receiving one without it must reject the token. Tokens themselves, and any personal data inside them, must never be written to logs.

The report notes AI agents increasingly use signed tokens to reach systems, data and APIs, and says the guidance applies there too. Wider AI agent access risks are excluded from its scope, and NIST and CISA said they are still developing guidelines for them.

Written After Two Token Compromises

The report traces the problem to two incidents. In a 2020 supply chain intrusion, attackers who had compromised Active Directory Federation Services forged SAML assertions to bypass multifactor authentication (MFA) at thousands of organizations, federal agencies among them.

In the second, foreign actors used a consumer signing key exposed by mistake, then forged tokens with it. Token validation failures let it produce valid signatures inside enterprise and government systems, and more than 60,000 emails were taken from one agency.

"Identity is the new perimeter, and the tokens and assertions behind it are attractive targets for sophisticated adversaries," said Chris Butera, CISA acting executive assistant director for cybersecurity. He said the guidelines offer a path to harden token issuance so a stolen credential cannot become a foothold across the federal enterprise.

CISA said nearly 250 public shaped the final text. Google, Microsoft, Okta, Amazon Web Services, Oracle, IBM, HashiCorp, Wiz and the OpenID Foundation fed in through its Joint Cyber Defense Collaborative.

CISA Unveils Cybersecurity Goals For Critical Infrastructure Sectors News 28 October 2022

CISA Unveils Cybersecurity Goals For Critical Infrastructure Sectors

NIST Defers Pre-2018 CVEs to Tackle Growing Vulnerability Backlog News 8 April 2025

NIST Defers Pre-2018 CVEs to Tackle Growing Vulnerability Backlog

CISA Unveils Cybersecurity Toolkit to Shield US Elections From Hackers News 11 August 2022

CISA Unveils Cybersecurity Toolkit to Shield US Elections From Hackers

NCSC Warns Against Chinese Cyber Attacks on Critical Infrastructure News 25 May 2023

NCSC Warns Against Chinese Cyber Attacks on Critical Infrastructure

Biden and Cybersecurity: A Six-Month Performance Review Magazine Feature 20 August 2021

Biden and Cybersecurity: A Six-Month Performance Review

What’s Hot on Infosecurity Magazine?

Microsoft Releases Emergency Patch to Fix RDS Vulnerability

Revolut Confirms Data Breach Through Fake Government Requests

Hackers Exploit Maximum Severity Flaw in GitLab

OpenAI Agent Swarm Hacks RubyGems Package Manager

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens

Anthropic Reveals Yet Another Cybersecurity Incident

FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors

Defense Cyber Spending Set to Surge Amid Rising Attacks on Military Systems

CRA Reporting Rules Take Effect: How to Ensure Your Organization is Ready

Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls

NHIs Now the Number One Corporate Entry Point for Hackers

Understanding Frontier AI Defense: What Cyber and IT Leads Need to Know

Human Risk in Cybersecurity: Protecting Your Organization Beyond Technology

Same Front Door, New Visitors: Securing Humans and AI Agents at the Browser

Financial Services Cyber Resilience: Stress Testing Third Parties Before Attackers Do

How To Enhance Security Operations with AI-Powered Defenses

How to Manage Enterprise Cyber Resilience in the Age of AI

How Faster Cyber-Attacks Are Reshaping Enterprise Cybersecurity Strategies

Researchers Claim First Fully Agentic Ransomware: JadePuffer

AI is Already Powering Cyber-Attacks. Can it Power Cyber Defense?

Google Cloud's New CISO Chris Betz on Integrating AI in Cyber Defenses

How World Cup Password Trends Can Increase Active Directory Risk

New CISA Guide Helps Agencies Adopt SASE For Zero Trust