What is Cross App Access?
In short:Cross App Access, or XAA, is a protocol that lets an enterprise identity provider broker connections between apps, including agents. Admins approve which apps may talk to which, centrally. It uses ID-JAG and became the MCP Enterprise-Managed Authorization extension, with Okta shipping it as Agent SSO.
How does it work?
The user signs in once; the identity provider issues ID-JAGs for approved app pairs; each app exchanges them for tokens.
What does it look like in practice?
Okta Agent SSO, based on Cross App Access, became generally available on 24 August 2026.