Topic starter
21/08/2026 4:53 pm
TL;DR: AI agents that chain tools across Jira, Slack, warehouses, and internal systems create shadow AI when authorization stays outside the identity perimeter, according to TruFoundry’s analysis of Cross App Access and MCP gateway design. The practical shift is that access review assumptions built for static app grants break when agent-to-tool trust is mediated centrally and revoked from the IdP.
Editorial analysis by NHI Mgmt Group, based on content published by TruFoundry: “Cross App Access on the TrueFoundry MCP Gateway: Identity-Governed Agent Access, Powered by Your IdP”.
Key questions
Q: What breaks when AI agents chain access across tools and services?
A: The original approval no longer describes the effective access path.
Q: When should organisations prioritise IdP-mediated authorization over per-app consent?
A: They should prioritise it when agents chain across multiple systems, when downstream access must be revoked centrally, or when standing credentials would otherwise persist beyond the task.
Q: What are the signs that agent access is becoming ungovernable?
A: Look for shared secrets across tools, inherited CI identity, inconsistent credential use between runs, and logs that cannot explain which prompt led to which action.
Practitioner guidance
- Define the agent authorization boundary Map every place an AI client, MCP gateway, or downstream tool establishes trust outside the IdP, then classify those paths as governed access relationships.
- Replace standing downstream credentials Remove long-lived API keys and shared secrets from agent workflows where the gateway can broker short-lived, audience-scoped tokens instead.
- Centralize offboarding for agent-linked access Tie agent and user deprovisioning to the same identity lifecycle so revocation reaches tool access, not just login access.
Bottom line: Agentic access becomes a governance issue once the IdP is no longer the place where tool relationships are authorised and revoked.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
21/08/2026 5:11 pm
Cross app access turns agent authorization into an identity governance problem, not a tool-integration problem. Once the IdP becomes the policy authority, the enterprise can finally answer which client may reach which tool on whose behalf. That changes the control objective from tracking integrations to governing delegated access. Practitioners should treat agent-to-tool relationships as access entitlements with lifecycle, audit, and revocation requirements.
A few things that frame the scale:
- The average worker in a typical enterprise holds 96,000 entitlements, and 38% of IdP accounts are dormant, according to Veza's 2026 State of Identity and Access Report.
A question worth separating out:
Q: How can security teams tell whether Cross App Access is actually improving control?
A: Look for a single policy and audit trail in the IdP that lists approved client-server pairs, granted scopes, expiry times, and revocation actions. If those decisions still live in downstream apps, the organisation has visibility but not governance.
👉 Read our full editorial: Cross app access for AI agents shifts authorization to the IdP