TrueFoundry Joins Okta to Extend Identity Policies to AI Agents

TrueFoundry, the enterprise AI control plane, has announced support for the Cross App Access (XAA) protocol. AI agents connecting through the TrueFoundry AI Gateway can now operate under the same Okta policies organizations already apply to employees, reducing the custom security review that has slowed production deployments.

Most AI agents running in production still authenticate with static API keys. These keys rarely expire, are seldom limited to a single task, and give security teams little record of visibility into what an agent accessed or when. One survey found that 88% of organizations reported confirmed or suspected AI agent security incidents in the past year. Among organizations that experienced AI-related breaches, 97% lacked adequate access controls for their AI systems.

Read more –NetApp acquires PEAK:AIO to accelerate AI deployments

Cross App Access, formally known as the Identity Assertion Authorization Grant, is an open, vendor-neutral protocol that extends OAuth and serves as an authorization extension within the Model Context Protocol (MCP). Unlike a static key that grants broad, standing access, XAA issues a short-lived token tied to the user’s active Okta identity and scoped to the agent’s specific task. Security teams can revoke the token at any time, and every grant is logged for auditing.

TrueFoundry sits directly in the path of agent traffic, with requests flowing through its gateway, MCP servers, and orchestration layer. This position makes TrueFoundry a natural identity control point: every agent connection can be evaluated against the organization’s central Okta policies, just as a human user’s connection would be.

Read more – Lazarus AI raises $43 million for independent AI

For platform and security teams, the integration means:

• Existing policies carry over. Access rules already defined in Okta apply to agents, eliminating the need to design or maintain a separate AI governance framework.
• Faster security reviews. Agent access runs through an identity system the security team already trusts, shortening the path to production.
• Consistent standards across the stack. Agents access existing tools under the same identity rules that govern the workforce.

“Security teams already trust Okta to decide who can reach what, and agents should answer to those same rules,” said Nikunj Bajaj, co-founder and CEO of TrueFoundry. “Every agent request in a TrueFoundry deployment already passes through our gateway, so we can check it against Okta policy at the moment of access. Enterprises get one place to govern their agents and an audit trail they can act on, which is what moves agentic AI from pilot to production.”

Read more – Cynet adds AI security and identity protection

“Organizations shouldn’t have to choose between adopting AI tools and maintaining visibility over enterprise access,” said Aaron Parecki, Senior Director of Identity Standards, Okta. “By connecting apps with the Cross App Access protocol, security teams get more control and users get a better experience without all the OAuth consent prompts.”

Cross App Access via Agent SSO is included with Okta workforce SSO plans at no additional cost. The TrueFoundry integration is available through the Okta Integration Network.