Overview#

Security Token is a Token that is used Authentication or Authorization

Security Tokens include:

• HTTP cookies
• OAuth 2.0 Tokens
• Hardware Security Module
• Hard tokens
• Tokens

OAuth 2.0 Token Exchange#

Security Token is a set of information that facilitates the sharing of identity and security information in heterogeneous environments or across Security Domains. Examples of security tokens include JSON Web Tokens (JWTs) and SAML Assertions. Security Tokens are typically Digitally Signed to achieve integrity and sometimes also encrypted to achieve confidentiality. Security tokens are also sometimes described as Assertions, such as in RFC 7521.

Security Considerations are REQUIRED when Security Token is:

• data At Rest
• data In Process
• data In Transit

More Information#

There might be more information for this subject on one of the following:

• Holder-of-Key
• Identify and Authenticate access to system components
• OAuth 2.0 Token Exchange
• PKCS 11
• Proof-of-Possession
• Security Token Service
• Token Binding Protocol
• Token Binding over HTTP