TrueFoundry recently announced official support for the open Cross App Access (XAA) protocol. This strategic integration connects AI agents directly to Okta’s central identity framework. Consequently, companies are now able to apply common employee security policies to autonomous AI agents. As a result, organizations get rid of the security roadblocks that usually slow down production rollouts.
Enterprise Security Optimization for AI Workflows
Today, most enterprise AI agents use static API keys for authentication purposes. Nonetheless, such credentials seldom have an expiration date and are often assigned too many system permissions. Additionally, security teams cannot control which data is accessed by an agent. Indeed, according to recent industry surveys, 88% of firms encountered some AI agent security issues in the previous year. Furthermore, 97% of hacked firms did not have proper access controls for their AI systems.
To address these vulnerabilities, Cross App Access operates as a vendor-neutral identity standard. Formally known as the Identity Assertion Authorization Grant, XAA extends traditional OAuth functionality. Additionally, it functions as an authorization extension within the Model Context Protocol (MCP). Instead of broad standing credentials, XAA generates short-lived tokens tied directly to an active Okta user identity. Security administrators can revoke these tokens immediately, while every system request creates a permanent audit trail.
Because TrueFoundry sits directly in the path of enterprise agent traffic, requests flow smoothly through its gateway, MCP servers, and orchestration layer. Therefore, TrueFoundry naturally acts as a centralized identity control point for the entire enterprise stack. Each incoming connection undergoes instant evaluation against established Okta policies before accessing sensitive systems.
“Security teams already trust Okta to decide who can reach what, and agents should answer to those same rules,” said Nikunj Bajaj, co-founder and CEO of TrueFoundry. “Every agent request in a TrueFoundry deployment already passes through our gateway, so we can check it against Okta policy at the moment of access. Enterprises get one place to govern their agents and an audit trail they can act on, which is what moves agentic AI from pilot to production.”
Accelerating Production Deployments with Unified Governance
For platform and security teams, this integration delivers significant operational advantages across the stack. First, existing workforce access rules apply automatically to AI agents, eliminating complex administrative overhead. Second, security teams complete reviews faster because the workflow utilizes existing trusted identity infrastructure. Third, enterprise applications maintain consistent governance standards across human employees and autonomous agents alike.
“Organizations shouldn’t have to choose between adopting AI tools and maintaining visibility over enterprise access,” said Aaron Parecki, Senior Director of Identity Standards, Okta. “By connecting apps with the Cross App Access protocol, security teams get more control and users get a better experience without all the OAuth consent prompts.”
Cross App Access via Agent SSO comes included with Okta workforce SSO plans at no extra charge. Furthermore, enterprises can deploy the verified TrueFoundry integration directly through the Okta Integration Network starting today.
To explore how Security Operations Centers (SOC) play a crucial role in defending against modern cyber threats, read our latest SOC News.
News Source: Businesswire.com
