Enabling Cross App Access for SAML-Based Enterprise Apps

This guide covers implementing Cross App Access (XAA) for SAML-federated applications without migrating to OpenID Connect. It explains the Identity Assertion Authorization Grant (ID-JAG), a short-lived JWT that lets resource servers identify users and issue scoped access tokens while preserving existing SAML integrations, without refresh tokens.