More than 25 software makers have signed on to Okta’s Cross App Access framework, the company said on June 23. The framework sends every connection an AI agent makes to a business application through the customer’s own identity controls.
Asana, Atlassian, Cloudflare, Datadog, Slack, Zoom and Anthropic’s Claude are among the early adopters. Canva, Docker, Figma, Linear, Supabase, Cursor and Microsoft’s Visual Studio Code also appear on the roster. The integrations cover the tools where employees start work, the apps that hold company data and the developer infrastructure that carries agent traffic.
Okta launched Cross App Access, known as XAA, in June 2025 to govern agent-to-app and app-to-app connections. It is built as an extension of OAuth. It now also serves as an official authorization extension for the Model Context Protocol, the standard that links AI models to outside data and tools.
Three roles for partners
Okta sorts the partners into three groups. Requesting apps, such as Claude, Cursor, Docker, Visual Studio Code and Zoom, are the agents and assistants that ask for data. Resource apps, among them Asana, Atlassian, Figma, Slack and Supabase, hold that data. A third group of identity providers, gateways and frameworks, including Cloudflare, Keycloak, WorkOS and Zuplo, handles the traffic in between.
Okta gave an example. A product manager asks Claude for a launch readiness summary. The agent pulls milestones from Asana or Linear, documents from Atlassian, designs from Figma or Canva and meeting notes from Zoom or Granola. Under XAA, each request runs against the user’s active Okta identity and is checked against company policy before access is granted. Every action is logged.
“With AI agents becoming increasingly core to daily workflows, organizations are aligning around XAA as the secure path to deploy agents in production,” said Ely Kahn, Okta’s chief product officer.
Zoom backs XAA as both a requesting and a resource app. “By supporting Cross App Access as both a requesting and resource application, we’re ensuring that AI agents can securely bring meeting context to other workflows,” said Brendan Ittelson, Zoom’s chief ecosystem officer.
Standards and early use
The official MCP software development kits are adopting XAA as an enterprise-managed authorization extension. TypeScript and Java are supported, and Python support is planned.
Okta also points to Anthropic’s beta program, where it is the featured identity provider. Ramp, Webflow and HubSpot are using it to govern how Claude reaches participating MCP providers.
Okta Workforce customers get access to supported XAA apps through the Okta Integration Network starting in August. Auth0 B2B SaaS customers are slated for early access at the end of July.
Sources
- Okta expands AI agent security to support new agent ecosystems and any identity provider
- Okta expands Cross App Access ecosystem to secure AI agent connections – SiliconANGLE
