# Okta Cross App Access (XAA / ID-JAG) in Nirmata AIControls: standards-based authorization for AI agents

DevFeed: [Okta Cross App Access (XAA / ID-JAG) in Nirmata AIControls: standards-based authorization for AI agents](<https://devfeed.tech/articles/okta-cross-app-access-xaa-id-jag-in-nirmata-aicontrols-standards-based-authorization-for-ai-agents-17657.md>)

Original publisher: [Read original article](<https://nirmata.com/2026/08/18/okta-cross-app-access-xaa-id-jag/>)

Author: Ritesh Patel

Published: 2026-08-19T00:24:40Z

Content type: article

Language: en

Sources: [Nirmata](<https://devfeed.tech/sources/nirmata.md>)

Topics: [cross-app-access](<https://devfeed.tech/topics/cross-app-access.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [okta](<https://devfeed.tech/topics/okta.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Model Context Protocol (MCP)](<https://devfeed.tech/topics/model-context-protocol-mcp.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [cross-app-access](<https://devfeed.tech/tags/cross-app-access.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [llm](<https://devfeed.tech/tags/llm.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mcp-server](<https://devfeed.tech/tags/mcp-server.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [okta](<https://devfeed.tech/tags/okta.md>), [standards](<https://devfeed.tech/tags/standards.md>)

## AI overview

The article explains how Nirmata AIControls supports Okta Cross App Access and the ID-JAG authorization profile for AI agents. It describes token exchanges performed on behalf of agents, administrator-controlled app-to-app access, policy checks, budgets, and audit records for delegated MCP and LLM calls.

## Source excerpt

AIControls now performs the ID-JAG token exchanges on your agents' behalf -- so agents need no protocol code -- and policy-checks, budgets, and attributes every delegated MCP and LLM call to the human it acts for. ID-JAG answers may this agent act for this user? AIControls answers what... The post Okta Cross App Access (XAA / ID-JAG) in Nirmata AIControls: standards-based authorization for AI agents first appeared on Nirmata.