Case Study: Okta advances Agent SSO with WorkOS

Okta adopts WorkOS for Agent SSO in 300 seconds

Okta, a leading identity provider, faced the challenge of enabling secure, enterprise-ready AI agent access (Agent SSO) to third-party applications without compromising on security or control. While Okta could broker the initial connection using the new Cross App Access standard, the critical task of validating the grant and issuing the secure access token remained a complex development hurdle for the applications themselves. To solve this, Okta leveraged WorkOS and its AuthKit product to handle the server-side integration.

WorkOS implemented a solution where its AuthKit service seamlessly accepts the identity assertions from Okta and other enterprise IdPs. It performs the necessary validation, including JWT signature verification and security checks, enforces local policy, and finally issues a properly scoped access token for the application. This allowed Okta to offer a complete, secure Agent SSO solution, ensuring their customers' AI agents could connect to resource applications like Asana and Slack without the risk of long-lived API keys.

Okta