You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: packages/@okta/vuepress-site/docs/concepts/xaa/index.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ title: Cross App Access (XAA)
4
4
5
5
## What is Cross App Access?
6
6
7
-
Cross App Access (XAA) provides a low-friction mechanism for an app to establish secure connections with a third-party resource app. The third-party resource app resides in a separate domain that's protected by an external authorization server. To support cross-domain authorization, a trust relationship is established between the app's identity provider and the external resource authorization server. A user can SSO to their app, and the app processes can securely access data across domains on the resource app on behalf of the user without additional consent prompts using XAA.
7
+
Cross App Access (XAA) provides a low-friction mechanism for an app to establish secure connections with a third-party resource app. The third-party resource app resides in a separate domain that's protected by an external authorization server. To support cross-domain authorization, a trust relationship is established between the app's identity provider and the external resource authorization server. A user can SSO to their app, and the app can securely access data across domains within the resource app on behalf of the user, without additional consent prompts, using XAA.
8
8
9
9
### The problem Cross App Access solves
10
10
@@ -117,7 +117,7 @@ Okta supports requesting apps that use the following protocols for SSO:
117
117
***OpenID Connect (OIDC)**: Recommended for new integrations and modern app architectures.
118
118
***SAML 2.0**: Supported for existing enterprise federations, allowing organizations to adopt XAA without migrating legacy authentication flows. For this protocol, Okta allows your requesting app to request an ID-JAG based on a refresh token exchange using your SAML assertion. See [Enable Your SAML Requesting App for Cross App Access](https://developer.okta.com/blog/2026/07/17/xaa-saml-requester#xaa-implementation-checklist-for-saml-federated-applications)
119
119
120
-
Independent software vendors (ISVs) looking to implement Cross App Access features leveraging their current SSO app integration in the Okta Integration Network (OIN) can follow this journey to build a requesting app:
120
+
If you're an independent software vendor (ISV) looking to implement XAA requesting-app features on your current SSO app integration in the Okta Integration Network (OIN), see the following journey:
121
121
122
122
***[Build a requesting app]**: Follow the requesting app journey if your app needs to access an external resource app on behalf of signed-in users.
123
123
<!--- Use this blog if the above link isn't available: [How to Build and List Secure Cross App Access (XAA) Connections on Okta Integration Network (OIN)](https://developer.okta.com/blog/2026/07/06/submit-oin-xaa#why-cross-app-access-xaa-matters-for-isvs-and-their-customers) -->
@@ -129,7 +129,7 @@ Okta supports resource apps that use the following protocols for SSO:
129
129
***OpenID Connect (OIDC)**: Recommended for new integrations and modern app architectures.
130
130
***SAML 2.0**: Supported for existing enterprise federations, allowing organizations to adopt XAA without migrating legacy authentication flows.For this protocol, your resource authorization server must validate the ID-JAG and resolve the SAML `nameid` assertion. See [Enabling Cross-App Access for SAML-Based Resource Apps](https://developer.okta.com/blog/2026/07/03/cross-app-access-saml)
131
131
132
-
If you are an ISV wanting to add your resource app to the Okta Integration Network (OIN) with Cross App Access capabilities, see this journey for creating a resource app:
132
+
If you're an ISV wanting to add your resource app to the OIN with XAA capabilities, see this journey for creating a resource app:
133
133
134
134
***[Build a resource app]**: Follow the resource app journey if your app exposes APIs that need to accept incoming XAA authorization requests.
135
135
<!--- Use this blog if the above link isn't available: [How to Build and List Secure Cross App Access (XAA) Connections on Okta Integration Network (OIN)](https://developer.okta.com/blog/2026/07/06/submit-oin-xaa#why-cross-app-access-xaa-matters-for-isvs-and-their-customers) -->
0 commit comments