Cross App Access (XAA) simplifies how third-party applications, including Artificial Intelligence (AI) agents, securely share data. Okta moves complex Open Authorization (OAuth) consent flows away from end users and into the Admin Console, allowing administrators to centrally manage which applications access data from others. This feature securely connects AI agents to other applications using administrator-defined policies rather than user consent prompts.
- Okta Identity Engine (OIE)
- Cross App Access (XAA)
- Okta for AI Agents (O4AA)
What is the purpose of Cross App Access?
Cross App Access simplifies how third-party applications securely share data. Okta moves complex OAuth consent flows away from end users and into the Admin Console. This allows administrators to centrally manage which applications access data from others. This feature proves especially useful for AI agents that retrieve or act on data from other Software as a Service (SaaS) applications without requiring repeated user consent.
How does Cross App Access function?
Administrators define a requesting application, such as an AI agent, and a resource application, such as a SaaS application. Okta manages a directional connection between them, which Okta calls a managed connection. The AI agent uses an Identity Assertion Authorization Grant (ID-JAG) flow to exchange its ID token for an Access token to the resource application.
How does Cross App Access relate to Artificial Intelligence agents?
Cross App Access securely connects AI agents to other applications required for interaction. Okta ensures that administrator-defined policies govern data sharing between the AI agent and other SaaS applications rather than user consent prompts.
