NIST & CISA Announce NIST IR 8587 Protecting Tokens and Assertions from Forgery, Theft, and Misuse Webinar on January 23

01/22/2026 12:30 PM EST

REMINDER: The National Institute of Standards and Technology (NIST) and the Cybersecurity and Infrastructure Security Agency (CISA) are hosting a live webinar at 12:00 p.m. (ET) on Jan. 23, to walk through the initial public draft of Interagency Report 8587, “Protecting Tokens and Assertions from Forgery, Theft, and Misuse.” Due to high demand, the webinar will also be hosted via LinkedIn livestream: Cybersecurity and Infrastructure Security Agency: Posts | LinkedIn. For those already registered, please click here: Microsoft Virtual Events Powered by Teams. 

During the webinar, the Report’s authors will walk through key implementation guidance aimed at federal agencies and cloud service providers (CSPs) to secure identity tokens and assertions against forgery, theft, and misuse.

This information is especially relevant for identity and access management professionals, federal IT teams, and CSPs serving government clients, as it addresses critical vulnerabilities in modern cloud and federated identity systems.

Feedback Sought

During this event, we will familiarize the audience with the draft Report and encourage written feedback during the open comment period (closing on January 30, 2026). We encourage broad input from government and industry stakeholders and are specifically hoping for feedback on:

• Signing Key Validity Periods
• Token Validity Periods
• Key Protection and Isolation
• Key Scoping
• Emerging Standards