ID-JAG

In short: ID-JAG, the Identity Assertion Authorization Grant, is the token an identity provider issues in Cross App Access. The agent presents it to an app's authorization server to get an access token for the signed-in user. It lets the identity provider control app access centrally.

Where does it show up in practice?

Aembit and Descope both name XAA/ID-JAG.

Related terms

• cross app access
• enterprise managed authorization