How We Brought Enterprise-Managed Authorization to Rovo MCP with XAA and ID-JAG

Atlassian implemented enterprise-managed authorization for Rovo MCP using Cross-App Access (XAA) and Identity Assertion JWT Authorization Grant (ID-JAG), letting admins centrally authorize MCP client access so users reach approved connections without individual OAuth consent screens. The implementation validates external identity assertions while Atlassian retains control over token issuance and access policies.