TrueFoundry Joins Okta’s Cross App Access Ecosystem, Extending Workforce Identity Policies to AI Agents

TrueFoundry’s AI Gateway evaluates agent traffic against Okta’s identity and policy engine, replacing static API keys with short-lived, task-scoped, auditable access

SAN FRANCISCO--(BUSINESS WIRE)--TrueFoundry, the enterprise AI control plane, has announced support for the Cross App Access (XAA) protocol. AI agents connecting through the TrueFoundry AI Gateway can now operate under the same Okta policies organizations already apply to employees, reducing the custom security review that has slowed production deployments.

Most AI agents running in production still authenticate with static API keys. These keys rarely expire, are seldom limited to a single task, and give security teams little record of visibility into what an agent accessed or when. One survey found that 88% of organizations reported confirmed or suspected AI agent security incidents in the past year. Among organizations that experienced AI-related breaches, 97% lacked adequate access controls for their AI systems.

Cross App Access, formally known as the Identity Assertion Authorization Grant, is an open, vendor-neutral protocol that extends OAuth and serves as an authorization extension within the Model Context Protocol (MCP). Unlike a static key that grants broad, standing access, XAA issues a short-lived token tied to the user’s active Okta identity and scoped to the agent’s specific task. Security teams can revoke the token at any time, and every grant is logged for auditing.

TrueFoundry sits directly in the path of agent traffic, with requests flowing through its gateway, MCP servers, and orchestration layer. This position makes TrueFoundry a natural identity control point: every agent connection can be evaluated against the organization’s central Okta policies, just as a human user’s connection would be.

For platform and security teams, the integration means:

• Existing policies carry over. Access rules already defined in Okta apply to agents, eliminating the need to design or maintain a separate AI governance framework.
• Faster security reviews. Agent access runs through an identity system the security team already trusts, shortening the path to production.
• Consistent standards across the stack. Agents access existing tools under the same identity rules that govern the workforce.

“Security teams already trust Okta to decide who can reach what, and agents should answer to those same rules,” said Nikunj Bajaj, co-founder and CEO of TrueFoundry. “Every agent request in a TrueFoundry deployment already passes through our gateway, so we can check it against Okta policy at the moment of access. Enterprises get one place to govern their agents and an audit trail they can act on, which is what moves agentic AI from pilot to production.”

“Organizations shouldn’t have to choose between adopting AI tools and maintaining visibility over enterprise access,” said Aaron Parecki, Senior Director of Identity Standards, Okta. “By connecting apps with the Cross App Access protocol, security teams get more control and users get a better experience without all the OAuth consent prompts.”

Cross App Access via Agent SSO is included with Okta workforce SSO plans at no additional cost. The TrueFoundry integration is available through the Okta Integration Network.

To see how TrueFoundry governs AI agents with Okta, visit truefoundry.com.

About TrueFoundry

TrueFoundry provides an enterprise-grade AI Gateway that includes an LLM Gateway, MCP Gateway, and Agent Gateway, enabling enterprises to securely connect to, observe, and govern access to models, tools, guardrails, and agents from a single control plane. The AI Gateway enables secure, efficient, future-safe agentic workloads through unified, composable connections across providers.

TrueFoundry's vision is to become the central control plane for running Agentic AI at scale within enterprises, serving as the command center for enterprise AI. Headquartered in San Francisco, TrueFoundry operates across North America, Europe, and Asia-Pacific, supporting enterprise AI workflows for some of the world's most innovative organizations. To learn more about TrueFoundry, visit https://www.truefoundry.com.

About Okta

Okta, Inc. is The World’s Identity Company™. We secure AI, machine, and human identity so everyone is free to safely use any technology. Our workforce and customer solutions empower businesses and developers to protect their AI agents, users, employees, and partners while driving security, efficiencies, and innovation. Learn why the world’s leading brands trust Okta for authentication, authorization, and more at okta.com.