# third-party applications Published articles for third-party applications. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Add Cross App Access to Your OIDC Requesting Application DevFeed: [Add Cross App Access to Your OIDC Requesting Application]() Original publisher: [Read original article]() Author: Sohail Pathan Published: 2026-08-21T05:00:00Z Content type: tutorial Language: en Sources: [Okta Developer]() Topics: [OpenID connect (OIDC)](), [OAuth](), [OAuth 2.0](), [JSON Web Tokens](), [API](), [Authorization](), [AI Agent]() Tags: [agent](), [api](), [authorization](), [callback](), [claude](), [cross-app-access](), [identity](), [jwt](), [oauth](), [oauth-2-0](), [oidc](), [openid-connect](), [sso](), [third-party-applications](), [token](), [xaa]() ### AI overview This guide explains how an OIDC-federated application can use Cross App Access (XAA) to request resources from a third-party application. It describes exchanging a refresh token for an Identity Assertion Authorization Grant, exchanging that short-lived JWT for an OAuth access token, and using the access token for the resource API request. ### Source excerpt If you currently federate enterprise customers using OpenID Connect (OIDC) and want to connect with third-party applications, this Cross App Access (XAA) guide is for you. The Identity Assertion Authorization Grant specification, the basis of XAA, was designed with OIDC in mind. Your app already holds an ID token after sign-in, but it's the refresh token from that same sign-in that you exchange to reach a third-party app. This guide details what you need to support and how to make resource requests to a third-party app using XAA. Table of Contents How XAA in OIDC works XAA implementation checklist for OIDC-federated applications Request the ID-JAG token Request the access token Call the resource API Handle token expiration Making cross-application requests from your OIDC app securely Configure your XAA OIDC requesting app in Okta Register the requesting app in Okta Register the test resource app in Okta Register your requesting app at xaa.dev Register and configure the AI Agent in Okta Validate the XAA connection end-to-end Learn more about Cross App Access, OIDC, and OAuth 2.0 How XAA in OIDC works When an agent (like one running in Claude) needs API access, it presents an Identity Assertion Authorization Grant (ID-JAG). The ID-JAG is a short-lived JSON Web Token (JWT) issued by the Identity Provider (IdP) for your app's user. You exchange the ID-JAG token for an access token to the resource application you're connecting with. The sequence diagram below describes the OIDC XAA flow and how your application fits into it. You'll handle the flow in two parts: where your application requests the ID-JAG from the IdP using the refresh token, and where your app requests the access token from the ID-JAG from the third-party resource app's authorization server. XAA implementation checklist for OIDC-federated applications Follow the guide in this section to support XAA in your OIDC application when your app connects to a third-party resource application. The XAA flow places t ## A Better Way to Consume Third-Party Applications DevFeed: [A Better Way to Consume Third-Party Applications]() Original publisher: [Read original article]() Published: 2025-02-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [MySQL](), [nginx](), [Cloud Native Ecosystem](), [DevOps](), [clickhouse](), [Open Source]() Tags: [argocd](), [chainguard](), [chainguard-images](), [container-image](), [container-images](), [containers](), [devops](), [hardening](), [mysql](), [nginx](), [third-party-applications]() ### AI overview Chainguard presents Application Images as a safer way to consume third-party applications such as MySQL, Postgres, ClickHouse, NGINX, and developer tools. The minimal images are built from source and intended to reduce container attack surfaces and CVE exposure. ### Source excerpt Chainguard Containers are a great way to consume third party applications like MySQL, NGINX, ArgoCD, and others while reducing size and CVEs. ## SAML Protocol DevFeed: [SAML Protocol]() Original publisher: [Read original article]() Author: Keith Richards Published: 2023-11-29T17:55:03Z Content type: article Language: en Sources: [Clever]() Topics: [saml](), [Single sign-on (SSO)](), [Authentication](), [Authorization](), [Security]() Tags: [authentication](), [authorization](), [oauth2](), [protocol](), [saml](), [security](), [sso](), [standard](), [third-party-applications]() ### AI overview This article explains SAML as an open standard for exchanging authentication and authorization data between parties. It describes SAML's role in single sign-on, its history through SAML 2.0, and the roles of service providers and identity providers. ### Source excerpt A tool for Identity Federation Security Assertion Markup Language, or SAML, is an open standard for exchanging authentication and authorization data between two parties. It's a common strategy for single sign-on (SSO), allowing users to sign in once and authenticate with multiple third party applications. Similar to OAuth2.0, SAML promotes data security by preventing direct [...] The post SAML Protocol appeared first on Clever Engineering Blog. ## What is OAuth? DevFeed: [What is OAuth?]() Original publisher: [Read original article]() Author: Keith Richards Published: 2023-05-23T17:54:15Z Content type: tutorial Language: en Sources: [Clever]() Topics: [OAuth](), [OAuth 2.0](), [Protocol (disambiguation)](), [Authorization]() Tags: [auth](), [authentication](), [authorization](), [cryptography](), [oauth](), [oauth2](), [protocol](), [third-party-applications](), [web-applications]() ### AI overview This primer explains OAuth as a protocol for delegated access, allowing users to grant third-party websites or applications access to information on other websites without sharing login credentials. It traces the development from OAuth 1.0a to OAuth 2.0, including OAuth 2.0's support for native applications, removal of cryptographic signature requirements, and clearer authorization roles. ### Source excerpt A primer on delegated access OAuth, short for "open authorization", is a widely used protocol that allows users to grant third-party websites or applications access to their personal information on other websites. It provides a mechanism for secure access delegation across the internet. History Class Prior to the creation of OAuth, sharing of information with [...] The post What is OAuth? appeared first on Clever Engineering Blog. ## Ensure compliant and secure third-party access using GraphOS DevFeed: [Ensure compliant and secure third-party access using GraphOS]() Original publisher: [Read original article]() Author: Matthew Ratzke Published: 2023-03-20T09:00:00Z Content type: tutorial Language: en Sources: [Apollo Blog]() Topics: [GraphOS](), [GraphQL](), [Security](), [Authentication]() Tags: [authentication](), [ccpa](), [data-privacy](), [gdpr](), [graphos](), [graphql](), [how-to](), [jwt](), [security](), [third-party-applications]() ### AI overview This post explains how financial services companies can use Apollo GraphOS to provide compliant and secure third-party access to sensitive data. It describes schema contracts for limiting exposed fields and types, separating customer use cases, supporting data minimization, and applying access controls and authentication through Apollo Studio and Apollo Router. ### Source excerpt This post is a part of our "How to power modern financial services apps with Apollo GraphOS" series. Also in this series: - Deliver a personalized customer experience with GraphQL - Securing APIs declaratively with GraphQL - Adopt a Customer 360 approach to prevent fraud with GraphQL In recent years, GraphQL has gained popularity as a powerful alternative to REST APIs for building modern web applications. ## Build With Bookings API, Now Generally Available DevFeed: [Build With Bookings API, Now Generally Available]() Original publisher: [Read original article]() Author: Amanda Lee Published: 2022-05-24T19:00:00Z Content type: release Language: en Sources: [Square Corner Blog RSS Feed]() Topics: [API](), [App](), [Development]() Tags: [api](), [apis](), [applications](), [availability](), [developers](), [platforms](), [third-party-applications]() ### AI overview Square announced that its Bookings API is generally available in the United States, the United Kingdom, Canada, Australia, Spain, and Japan. The release adds seller-level permissions, webhook data access, and ListBookings endpoints, enabling third-party applications to manage Square Appointments bookings. ### Source excerpt A scalable, customizable booking solution for your application ## How OAuth 2.0 Works DevFeed: [How OAuth 2.0 Works]() Original publisher: [Read original article]() Author: info@goteleport.com (Virag Mody) Published: 2022-04-25T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [OAuth 2.0](), [OAuth](), [Authorization](), [data](), [App]() Tags: [authorization](), [core](), [credentials](), [developers](), [oauth](), [oauth-2-0](), [third-party-applications]() ### AI overview This article explains how OAuth 2.0 enables delegated access, allowing third-party applications limited access to protected user resources without requiring users to share their passwords. It introduces OAuth terminology and describes the security problems OAuth addresses. ### Source excerpt OAuth provides third party applications limited access to user resources without compromising the user's data. Find out exactly how in this blog. ## Introducing Gift Cards API DevFeed: [Introducing Gift Cards API]() Original publisher: [Read original article]() Author: Shaziya Bandukia Published: 2021-06-16T19:00:00Z Content type: release Language: en Sources: [Square Corner Blog RSS Feed]() Topics: [API](), [App]() Tags: [api](), [apis](), [developers](), [release](), [third-party-applications](), [webhooks]() ### AI overview Square announces the Gift Cards API in beta, enabling developers to integrate gift cards into third-party applications. The API supports creating, activating, reloading, redeeming, tracking, and managing customer links, with webhooks and discounted gift card functionality. ### Source excerpt Create, redeem, track, and reload gift cards ## Invoices API is Generally Available DevFeed: [Invoices API is Generally Available]() Original publisher: [Read original article]() Author: Shaziya Bandukia Published: 2021-04-21T19:00:00Z Content type: release Language: en Sources: [Square Corner Blog RSS Feed]() Topics: [API](), [Data Management]() Tags: [api](), [apis](), [integrations](), [invoicing](), [mobile](), [payment](), [release](), [third-party-applications]() ### AI overview Square announced the general availability of its Invoices API after a beta period. The API lets developers create, send, search, update, cancel, and manage invoices, integrate them with third-party applications, and support multiple payment methods. It is available to developers in the U.S., Canada, U.K., Australia, and Japan. ### Source excerpt Integrate Square invoices into third-party applications ## Pagination with Relative Cursors DevFeed: [Pagination with Relative Cursors]() Original publisher: [Read original article]() Author: Drew Martin Published: 2019-08-12T17:30:00Z Content type: article Language: en Sources: [Shopify Engineering](), [Shopify Engineering - Shopify Engineering]() Topics: [Shopify](), [Databases](), [SQL](), [Server]() Tags: [database](), [server](), [shopify](), [sql](), [third-party-applications]() ### AI overview Shopify explains how relative cursor pagination avoids the increasingly slow database queries caused by large page-number offsets. The approach remembers the previous position and continues from there, improving performance when applications retrieve large product catalogs. ### Source excerpt Using incremental page numbers for pagination scales poorly, so to solve this, Shopify uses relative cursor pagination to deliver faster queries.