--- title: Enable Your SAML Requesting App for Cross App Access description: Cross App Access (XAA) enables SAML-federated enterprise apps to securely connect with third-party applications without migrating to OIDC. The flow involves... canonical: https://daily.dev/posts/enable-your-saml-requesting-app-for-cross-app-access-t4jfwrwat twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Enable Your SAML Requesting App for Cross App Access | daily.dev og:description: Cross App Access (XAA) enables SAML-federated enterprise apps to securely connect with third-party applications without migrating to OIDC. The flow involves... og:url: https://daily.dev/posts/enable-your-saml-requesting-app-for-cross-app-access-t4jfwrwat og:image: https://api.daily.dev/og/posts/t4jfWrwat.png og:image:alt: Enable Your SAML Requesting App for Cross App Access og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Enable Your SAML Requesting App for Cross App Access **[Okta Dev](https://daily.dev/sources/okta)** · 12 min read · 0 upvotes · 0 comments ## Summary Cross App Access (XAA) enables SAML-federated enterprise apps to securely connect with third-party applications without migrating to OIDC. The flow involves three steps after SSO: exchanging a SAML assertion for an OAuth refresh token, exchanging the refresh token for an Identity Assertion Authorization Grant (ID-JAG) JWT, and redeeming the ID-JAG at the resource app's authorization server for an access token. The guide provides HTTP request examples for each step, covers token expiration handling, and walks through configuring both requesting and resource apps in Okta's Admin Console, including registering an AI Agent to define the relationship between apps and validating the end-to-end flow using xaa.dev. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Add Cross App Access to Your OIDC Requesting Application](https://daily.dev/posts/add-cross-app-access-to-your-oidc-requesting-application-mzl7e4jav) · Okta Dev · 1 upvotes · 0 comments - [Enabling Cross App Access for SAML-Based Enterprise Apps](https://daily.dev/posts/enabling-cross-app-access-for-saml-based-enterprise-apps-tdsxhdjpf) · Okta Dev · 0 upvotes · 0 comments - [What is Cross-App Access \(XAA\) and How It Works](https://daily.dev/posts/what-is-cross-app-access-xaa-and-how-it-works-hm360dpyi) · Descope · 0 upvotes · 0 comments - [Adopting the Cross App Access Protocol in Auth0](https://daily.dev/posts/adopting-the-cross-app-access-protocol-in-auth0-a9xr9ozv8) · Auth0 · 0 upvotes · 0 comments - [Develop a XAA-Enabled Resource Application and Test with Okta](https://daily.dev/posts/develop-a-xaa-enabled-resource-application-and-test-with-okta-q1lbpxnjh) · Okta Dev · 0 upvotes · 0 comments --- Tags: [#authentication](https://daily.dev/tags/authentication), [#oauth](https://daily.dev/tags/oauth), [#okta](https://daily.dev/tags/okta) [View this post on daily.dev](https://daily.dev/posts/enable-your-saml-requesting-app-for-cross-app-access-t4jfwrwat) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Enable Your SAML Requesting App for Cross App Access","url":"https://daily.dev/posts/enable-your-saml-requesting-app-for-cross-app-access-t4jfwrwat","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/enable-your-saml-requesting-app-for-cross-app-access-t4jfwrwat"},"datePublished":"2026-07-17T22:30:03.065Z","dateModified":"2026-07-17T22:30:24.282Z","description":"Cross App Access (XAA) enables SAML-federated enterprise apps to securely connect with third-party applications without migrating to OIDC. The flow involves...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cd374589062daa78fbf3dcd5683e5a62?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cd374589062daa78fbf3dcd5683e5a62?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Okta Dev","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Okta Dev","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/17da1ccc02574ef9838f856af0e10def","url":"https://daily.dev/sources/okta"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/enable-your-saml-requesting-app-for-cross-app-access-t4jfwrwat","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"authentication,oauth,okta","timeRequired":"PT12M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Okta Dev","item":"https://daily.dev/sources/okta"},{"@type":"ListItem","position":3,"name":"Enable Your SAML Requesting App for Cross App Access"}]} ```