Cross App Access (XAA) is an OAuth extension that enables secure app-to-app integrations in enterprise environments by using the Identity Provider as a central broker. Unlike API keys or standard OAuth flows, XAA provides IT governance, reduces user friction, and enables granular security through a two-step token exchange
Table of contents
Limitations of API keys and OAuth in enterprise app-to-app connectivityCross App Access (XAA) extends OAuth flows to manage application accessMake app-to-app requests using Cross App AccessBring your own requestor app to the xaa.dev testing siteGet the NestJS project with OAuth and OpenID Connect (OIDC) startedExchanging an ID token for an access token for another appInspecting the XAA token exchangeLearn more about XAA and elevating identity security using OAuthSort: