{
  "id": "cross-app-access",
  "name": "Cross App Access (ID-JAG)",
  "category": "protocols",
  "summary": "IETF OAuth draft (Identity Assertion JWT Authorization Grant) letting an app use an SSO identity assertion, via the trusted IdP, to get access tokens for a third-party API.",
  "description": "Coordinates through the identity provider the downstream resource authorization server already trusts for SSO, using Token Exchange. xaa.dev is a free, open sandbox for testing cross app access flows with ID-JAG.",
  "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/",
  "docs": "https://xaa.dev",
  "tags": [
    "auth",
    "oauth",
    "identity",
    "ietf-draft",
    "enterprise-sso"
  ],
  "status": "beta",
  "related": [
    "mcp-authorization",
    "oauth-client-id-metadata-document",
    "rfc-8693"
  ],
  "sources": [
    "https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/",
    "https://xaa.dev"
  ],
  "added": "2026-10-14",
  "updated": "2026-10-16",
  "last_verified": "2026-10-16",
  "submitted_by": "agentica-curator",
  "maintainer": "IETF OAuth WG",
  "longform": [
    {
      "type": "guide",
      "id": "add-oauth-to-your-mcp-server",
      "title": "Add OAuth authorization to your own MCP server",
      "url": "https://indexagentica.com/guides/add-oauth-to-your-mcp-server/",
      "json": "https://indexagentica.com/api/longform/guides/add-oauth-to-your-mcp-server.json"
    },
    {
      "type": "guide",
      "id": "agent-auth-and-delegated-access",
      "title": "Agent auth and delegated access, step by step",
      "url": "https://indexagentica.com/guides/agent-auth-and-delegated-access/",
      "json": "https://indexagentica.com/api/longform/guides/agent-auth-and-delegated-access.json"
    }
  ],
  "links": {
    "html": "https://indexagentica.com/entries/cross-app-access/",
    "markdown": "https://indexagentica.com/entries/cross-app-access.md",
    "json": "https://indexagentica.com/api/entries/cross-app-access.json",
    "source": "https://github.com/Drudley/indexagentica/blob/main/content/protocols/cross-app-access.json"
  }
}