Okta advances the industry standard for secure AI agent connections with expanding Cross App Access ecosystem

"As AI workflows become more integrated, interoperability and enterprise security need to advance together. We built Enterprise Managed Auth with Okta to replace fragmented, connector-by-connector authorization with a single, centrally managed model, so admins can extend their existing identity investment instead of provisioning access one connector at a time. The expanding Cross App Access ecosystem means enterprises can scale AI while standardizing on the identity provider already running their environment."

– Mayank Malhotra, Product, Anthropic

"Docker AI Governance is the control plane for enterprise agentic AI, giving security and platform teams the visibility and management they need to run AI agents safely at scale. Integrating XAA for human and non-human identity provides end-to-end security seamlessly, with no extra login, and giving enterprise admins the control they need to adopt enterprise-wide agentic AI and end the proliferation of uncontrolled authentication."

– Eli Aleyner, VP of Strategy, Docker

"Zoom sits at the center of how teams communicate and get work done. By supporting Cross App Access as both a requesting and resource application, we're ensuring that AI agents can securely bring meeting context to other workflows — and pull relevant information into Zoom to help employees move work from conversation to completion. That's the kind of seamless, identity-governed experience our joint customers expect."

– Brendan Ittelson, Chief Ecosystem Officer, Zoom

"Asana is building the system of record for human-agent teamwork, and that depends on enterprises trusting how AI agents access the work they manage in Asana. Cross App Access lets our shared customers connect agents to Asana through a single, governed Okta identity, with the visibility and control their security teams require. We see secure, standards-based access as the foundation for agentic work." 

– Arnab Bose, Chief Product Officer, Asana

"Enterprises need two things before they can trust AI agents at scale: the organizational context to act effectively and the identity governance to act securely. Atlassian's Teamwork Graph gives agents access to billions of nodes of organizational knowledge, providing the right context to deliver better results with less compute. The XAA protocol available through Okta ensures those connections remain secure and centrally managed, giving enterprises the confidence to move from experimental AI pilots to full-scale business transformation."

– Jamil Valliani, Head of AI Product, Atlassian

"Canva is already trusted by 95% of the Fortune 500, and our MCP server lets even more teams create, edit and publish on-brand designs with Canva's AI and design tools, all in the same workflow. Enterprise Managed Auth (also known as Cross App Access) makes it clear and simple for enterprises to manage AI access with a system they already trust, enabling teams to create with AI, safely and at scale."

– Anwar Haneef, GM & Head of Ecosystem, Canva

“AI agents need the same core security principles enterprises already expect for every other identity: explicit identity, centrally governed access, least privilege, and full auditability. By supporting Okta Cross App Access, Glean helps customers control what each agent is allowed to access through their existing identity and policy infrastructure, rather than relying on broad user-granted connections. That gives enterprises a more secure path to deploying agents in production.”

– Sunil Agrawal, CISO, Glean

"As AI agents evolve into autonomous teammates that triage bug reports, write code, and manage pull requests right within Linear, securing these workflows becomes paramount. By bringing Linear into Okta’s Cross App Access ecosystem, our customers can safely delegate complex tasks to agents under a single, enterprise-approved identity. This ensures engineering teams can safely unlock massive productivity gains without IT ever losing visibility or control over corporate context." 

– Jori Lallo, Co-founder, Linear

The richest context in any organization lives in its conversations: the decisions, the reasoning, the work in motion. Slack's MCP Server gives AI agents access to that context. And with Cross App Access built into MCP, employees never have to think about it; no authorization prompts, no per-server sign-ins. Organizations govern agent access to Slack once, through the identity policies they already have in place.

– Rod García, VP of Engineering, Slack

"Cross App Access, the open, vendor-neutral OAuth extension Okta has championed, delivers a much-needed standards-based way to govern how agentic platforms and autonomous agents interact with enterprise applications. The Aquera Agentic AI Bridge and MCP Servers build on that standard, connecting, via the Model Context Protocol, the systems of record that run the business — HR, CRM, finance, ITSM, etc. — to client AI agents that are authenticated and authorized by Okta."

– Reed Henry, Co-founder & CEO, Aquera

“Every enterprise we talk to wants to deploy AI agents, and almost every one is stuck on the same problem: managing agent authorization, smoothly, and at scale. By building Archestra.AI on Cross App Access, we’re letting companies extend the Okta identity they already trust to every agent connection, so security stops being the reason agent projects stall. Partnering with Okta here is how we make secure agent access something every enterprise can adopt, not just the ones with a platform team to build it themselves.” 

– Joey Orlando, Co-founder, Archestra.AI

“As developers build increasingly capable agents, authorization is becoming infrastructure. Standards like XAA and ID-JAG create a common foundation for how agents identify themselves, receive delegated access, and operate on behalf of users across enterprise systems. 

We’re excited to support the MCP Enterprise Authorization extension based on XAA because it helps developers build interoperable agents without reinventing identity and access controls for every application. When paired with runtime enforcement, organizations can move beyond static credentials and standing privileges, giving agents task-scoped access that is attributable, auditable, and revocable by default.”

– Ian Livingstone, Co-founder & CEO, Keycard

"As a long-standing contributor to Keycloak, Hitachi is proud to help the support of Model Context Protocol (MCP) authorization capabilities and Cross App Access with the open-source community. Through the powerful alignment of Okta and Keycloak, we are ensuring that enterprises can seamlessly scale secure AI automation while maintaining strict, standardized identity governance."

– Yuichi Nakamura, Head of OSPO, Hitachi, Ltd.

"Agents should not directly impersonate a user, and users should not have to sign in twice just to let an agent help them. With the Cross App Access protocol, MintMCP's gateway can give each agent its own identity while it acts on behalf of a real user. That means security teams can limit and revoke access, and users stay out of the repeat login loop."

– Jiquan Ngiam, Co-founder & CEO, MintMCP

“Static API keys and fragmented per-user consent screens are the biggest security blind spots in enterprise AI today, and XAA fixes both by bringing every agent connection under a single, centrally governed identity perimeter. Scalekit gives developers a straightforward path to building XAA-compliant flows without reinventing the authorization layer. Together, this lets enterprises deploy agents at scale with the visibility, control, and frictionless experience that both IT and end users need.”

– Ravi Madabhushi, Co-Founder & CTO, Scalekit

“Serval has always met people where they work. First in Slack and Teams, and now increasingly in agentic surfaces. Whether it's an MCP agent in Claude or a home-grown copilot, XAA lets Serval show up natively in those surfaces while allowing IT to manage that cross-app connection through their trusted IdP.”

– Jake Stauch, Founder & CEO, Serval

“AI agents are becoming a new class of enterprise client, and they need the same identity controls, auditability, and least-privilege access that companies expect from every production application. Cross App Access gives developers a standards-based way to connect agents to enterprise systems without falling back to static API keys or one-off integrations. At WorkOS, we’re focused on making enterprise-ready auth simple for developers, and our support for XAA helps customers build agentic products that plug directly into Okta’s identity and policy engine from day one.”

— Michael Grinich, Founder & CEO, WorkOS

"APIs and MCP are how AI gets work done. One of the biggest obstacles today is a tangled mess of auth options that aren't easy to use. XAA is a game changer – delivering on both an excellent customer experience and compatibility with governance layers like the Zuplo MCP Gateway."

– Josh Twist, CEO, Zuplo