The Okta Developer Blog is a place for developers to learn about identity, security, and building better applications.
14 min read
Enterprise apps rarely work alone. Imagine this scenario: HR wants to ensure that a new employee completes their new hire onboarding, and they want this verification in the company's HR app so it's tied to the employee's personnel file. But the onboarding tasks come from a task-tracking tool with requirements…
Read more about Build a Secure TypeScript MCP Client with Cross App Access (XAA)
3 min read
Starting March 5, 2027, Okta ends support for a few capabilities on Classic Engine. Identity and security requirements continue to evolve. Organizations expect authentication experiences that are more secure, flexible, and adaptable to changing users, devices, and applications. Okta invests in Okta Identity Engine, the modern foundation for passwordless authentication,…
Read more about Classic Engine Feature EOL: SSR, Desktop SSO, Device Trust
9 min read
Have you noticed that the Okta Angular SDK went fully standalone? There's no NgModule left to import, no importProvidersFrom wrapper to remember, and the guards are plain functions now. If you've been waiting for the SDK to look like the rest of your standalone Angular app, this is the release…
Read more about Supercharge Auth with Signals and the New Okta Angular SDK
11 min read
If you currently federate enterprise customers using OpenID Connect (OIDC) and want to allow applications to access your API on behalf of those users, this Cross App Access (XAA) guide is for you.
Read more about Add Cross App Access to Your OIDC Resource Application
8 min read
If you currently federate enterprise customers using OpenID Connect (OIDC) and want to connect with third-party applications, this Cross App Access (XAA) guide is for you.
Read more about Add Cross App Access to Your OIDC Requesting Application
3 min read
It all started with a phone call from an institute that reached out to recruit me for its campus ambassador program. I was navigating my first year of college, figuring things out. It was all new for me, a new city, far from home, and a hostel room. I was…
Read more about I Found My Coordinates: Code, Community, and Okta
7 min read
Python syntax and the flexibility of the Flask microframework make it a popular choice for quickly building web applications. While Flask provides the essentials to get you started, you'll need to tackle two critical pieces yourself: secure user authentication and authorization for your backend services. After all, how do you…
Read more about Build a Flask App with Okta for Secure OIDC Login and Authorized API Calls
8 min read
If you currently federate enterprise customers using Security Assertion Markup Language (SAML) and want to connect with third-party applications without migrating to OpenID Connect (OIDC), this Cross App Access (XAA) guide is for you.
Read more about Enable Your SAML Requesting App for Cross App Access
5 min read
A few years ago, getting a user signed in to an application or multiple applications with Single Sign-On (SSO) was enough; OpenID Connect (OIDC) handled the login, JWTs carried the claims, and Proof Key for Code Exchange (PKCE) made it secure. Today, with evolving AI, agents act on behalf of…
Read more about Build a Secure C# MCP App with Cross App Access (XAA)
2 min read
Learning identity management is hard enough. Navigating Okta's documentation to build something shouldn't be. If you've ever lost an afternoon stitching together how-to guides, product docs, and scattered blog posts just to figure out where to start, you're not alone – and we've heard you, loudly and repeatedly.
Read more about Introducing Okta Journeys: A Better Way for Developers to Learn Identity
3 min read
Cross App Access (XAA) lets your application request data from another vendor's API on behalf of a signed-in enterprise user, without static API keys and without a separate consent prompt for every connection. If enterprises buy your software, supporting XAA turns your integration into something their IT team can govern…
Read more about Build, Test, and Publish a Cross App Access App in the Okta Integration Network
11 min read
If you currently federate enterprise customers using Security Assertion Markup Language (SAML) and want to allow applications to access your API without migrating to OpenID Connect (OIDC), this Cross App Access (XAA) guide is for you.
Read more about Enabling Cross App Access for SAML-Based Resource Apps
Akanksha Bhasin
Vanshika Pandey
Alisa Duncan
Sohail Pathan
Aasawari Sahasrabuddhe 
Semona Igama 
Dan Maharry
Gagan Sikri 
Alex Silk
Michael Palermo