# Three identity vendors shipped the same agent access pattern in eight days

DevFeed: [Three identity vendors shipped the same agent access pattern in eight days](<https://devfeed.tech/articles/three-identity-vendors-shipped-the-same-agent-access-pattern-in-eight-days-16011.md>)

Original publisher: [Read original article](<https://workos.com/blog/cross-app-access-converged-in-eight-days>)

Author: WorkOS

Published: 2026-09-04T16:24:43Z

Content type: article

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [Auth0](<https://devfeed.tech/topics/auth0.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [MCP](<https://devfeed.tech/topics/mcp.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>), [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>)

Tags: [anthropic-claude](<https://devfeed.tech/tags/anthropic-claude.md>), [api](<https://devfeed.tech/tags/api.md>), [auth0](<https://devfeed.tech/tags/auth0.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [cross-app-access](<https://devfeed.tech/tags/cross-app-access.md>), [identity](<https://devfeed.tech/tags/identity.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [okta](<https://devfeed.tech/tags/okta.md>), [sso](<https://devfeed.tech/tags/sso.md>)

## AI overview

Okta, Auth0, and Descope shipped implementations of the Cross App Access agent-access pattern between August 24 and September 1. The pattern uses a Client ID Metadata Document to identify calling software and an ID-JAG token exchange to let an identity provider control application access.

## Source excerpt

Okta, Auth0, and Descope all shipped Cross App Access between August 24 and September 1. The two-layer pattern underneath it outlasts whichever vendor wins.