Loading

Topics

Cross-App Access

Who can use this feature?
StarterAdvancedEnterpriseEnterprise+

Visit our pricing page for more information.

The Cross-app access feature is currently in beta testing, and enabled only for a select group of customers.

Cross-App Access (XAA) allows your identity provider (IdP) to issue tokens that can be used to access Asana on behalf of users. This is required for integrations such as MCP that authenticate using your organization's identity provider.

Prerequisites

Before configuring Cross-App Access, ensure that:

  • You are an Asana Organization Admin.
  • Your identity provider (IdP) supports OpenID Connect (OIDC).
  • Your IdP application has been configured to issue OIDC tokens for Asana.
  • Cross-App Access has been enabled for your organization. During the Beta, this feature is available by opt-in only. If you do not see Security → Cross-app access (XAA) in your Admin Console, contact your Asana representative or Customer Success Manager to request access.

Configure cross-app access

Step 1: Open the Cross-App Access settings

  • In the Asana Admin Console, navigate to → SecurityCross-app access (XAA)

Step 2: Enable Cross-App Access

  • Turn on the Cross-app access toggle. This enables the configuration fields below.

Step 3: Configure your identity provider

  • Provide the following values:

Field

Description

Issuer URL

The issuer (iss) for your IdP. This identifies the identity provider issuing tokens.

JWKS URI

The endpoint where Asana retrieves your IdP's public signing keys to verify tokens.

Expected Audience

The audience (aud) claim that Asana expects to receive in issued tokens.

See the provider-specific setup guides below for instructions on locating these values in your identity provider.

Step 4: Save your configuration

Click Save.

After saving, Asana will accept tokens whose issuer (iss) and audience (aud) match the configured values.

Updating your configuration

You can return to Admin ConsoleSecurityCross-app access (XAA) at any time to:

  • Update your Issuer URL
  • Update your JWKS URI
  • Update your Expected Audience
  • Disable Cross-App Access

 

Loading
Cross-app access | Asana Help Center