Aembit, a company specializing in identity and access management for AI agents, has introduced support for the Cross App Access (XAA) protocol. This open standard, developed by Okta, allows enterprise identities to authorize access to downstream applications without requiring individual consent for each connection.
The integration was announced at the Oktane 2026 conference in Las Vegas. Aembit implements XAA through its new Enterprise-Managed Authorization Credential Provider, which follows the Model Context Protocol Working Group’s extension. This tool works alongside existing OAuth capabilities to provide a unified control layer.
By adopting this protocol, enterprises can extend their current Okta identity policies to connections driven by AI agents. Aembit serves as the enforcement point, allowing security teams to manage which agents act on behalf of users and under what specific policies, while reducing the need for repeated manual consent.
According to CEO David Goldschlag, the partnership enables joint customers to utilize XAA immediately, even if their other internal systems do not yet support the protocol natively. The platform aims to address the operational overhead caused by the increasing number of access relationships required by agentic AI.
