What is ID-JAG?
In short:ID-JAG, the Identity Assertion JWT Authorization Grant, is a token an enterprise identity provider issues so a client can get access to another app. It is the core of Cross App Access. The receiving app trusts the identity provider's assertion instead of asking the user for consent.
How does it work?
The identity provider issues an ID-JAG for a target audience; the client presents it to that app's authorization server for an access token.
What does it look like in practice?
Descope says its ID-JAG tokens preserve the link between agent, user and tenant.