What happened
On Sept 22, 2026 Aembit announced support for Cross App Access (XAA), Okta's open protocol that lets a user's enterprise identity authorize access to downstream applications without a separate consent step per connection. Integrated into Aembit IAM for Agentic AI (verified agent identity, policy-based access enforcement, auditability), launching as an Okta XAA partner at Oktane 2026.
Why it matters
XAA-style enterprise-managed authorization addresses the OAuth-consent gap for AI agents and MCP servers acting on a user's behalf; Aembit is an early independent implementer that extends the model across agent workflows.
Applicability
Teams deploying multi-step agents/MCP servers that need scoped, auditable downstream access without per-connection consent; assess if you standardize on XAA.