Silver Spring, Maryland, USA, September 22nd, 2026 – CyberNewswire
Aembit, a leading identity and access management (IAM) company specializing in AI agent support, recently made a significant announcement regarding its partnership with Okta. The collaboration marks an important milestone, as Aembit revealed its new support for Cross App Access (XAA), an innovative open protocol crafted by Okta. This protocol revolutionizes how enterprise identity can authorize access to downstream applications, allowing users to bypass the repetitive consent process that often complicates user experience in technology environments.
Officially launching this week at Oktane 2026 in Las Vegas, Aembit is positioned as one of the initial partners for XAA. The company is enhancing its Aembit IAM for Agentic AI platform, integrating verified agent identity, policy-based access enforcement, and robust audit features into its offerings. This integration is particularly timely as the role of AI agents continues to expand significantly across various sectors, including collaboration, project management, software development, and data platforms.
As organizations increasingly implement AI agents to perform tasks, the complexity of managing access relationships also escalates. The ability to smoothly govern these relationships is crucial to maintaining security and operational efficiency. Cross App Access addresses this challenge by streamlining the authorization burden for end-users, effectively eliminating the need for repeated consent steps every time an agent connects with a new approved application. Meanwhile, Aembit offers security teams a cohesive framework that dictates which agents can operate, on whose behalf, and according to what policies, thus fortifying enterprise security.
David Goldschlag, co-founder and CEO of Aembit, emphasized the significance of Cross App Access in modern enterprises. He indicated that this protocol aligns with the evolving dynamics of AI agents acting on behalf of human users. Goldschlag stated, “Okta is helping move that model forward, and Aembit makes it practical across the agent access path by connecting user identity, agent identity, and runtime policy in one control point.” As a launch partner for XAA, Aembit aims to enable their mutual customers to seamlessly adopt this feature, sidestepping the delays that often accompany full-system migrations.
The emergence of agentic AI presents a familiar yet complex identity management challenge at an unprecedented scale. The involvement of a single agent across multiple services for a single task can result in a sprawling network of access relationships within organizations. Traditional methods that involve managing these connections on a one-by-one basis leave both users and security teams hamstrung by operational inefficiencies, driving the need for more sophisticated solutions.
With the integration of Aembit’s XAA support, enterprises can seamlessly adapt their existing Okta identity and access policies to encompass agent-driven connections. Aembit continues to serve as the central policy enforcement point, which alleviates the pressures of managing multiple authorization pathways.
The synergies between Aembit and the XAA protocol afford organizations several distinct advantages:
-
Reduction in Authorization Sprawl: Employees can rely on their existing enterprise single sign-on (SSO) mechanism as they engage with approved agent workflows. This streamlined process reduces the often tedious task of navigating separate authorization steps for each service.
-
Centralized Policy Enforcement: Instead of burdening users with the responsibility of managing individual access relationships, security teams can apply uniform identity and access policies to connections created by agents.
-
Preservation of Accountability: Through the concept of blended identity, Aembit enables organizations to trace the actions of specific agents back to their verified identities, helping clarify who acted and under which access policy.
-
Gradual Adoption of XAA: Organizations have the flexibility to leverage the benefits of XAA as they become available, while still relying on established OAuth methods for other services. This transitional approach allows for an organic expansion as the entire ecosystem evolves.
- Streamlined Controls Across Multiple Environments: Aembit provides a cohesive enforcement mechanism for agent access across various managed cloud platforms, preventing the cumbersome need for separate management of authorizations.
Aembit’s integration of XAA is facilitated through its Enterprise-Managed Authorization Credential Provider. This provider implements the Model Context Protocol Working Group’s Enterprise-Managed Authorization extension, complementing Aembit’s existing OAuth capabilities. This strategic combination offers organizations a robust control layer, irrespective of the different levels of existing XAA adoption.
For more information regarding Aembit and the functionalities of Cross App Access, interested parties are encouraged to visit aembit.io.
About Aembit
Aembit serves as a comprehensive identity and access management platform tailored for agentic AI and various workloads. It empowers organizations to govern access based on user identity, contextual understanding, and centrally managed policies. Aembit equips enterprises with the tools necessary to effectively manage access risks posed by AI agents while streamlining credential management and promoting the adoption of AI technologies. Businesses are invited to explore further by visiting aembit.io and following Aembit on LinkedIn.
Contact Information:
CMO: Apurva Davé
Email: [email protected]