Skip to content

ai agent token exchange note for resource server #6273

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
susanharper-okta merged 3 commits into from
Jul 2, 2026
+5 −0
Merged

ai agent token exchange note for resource server #6273

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
568218e
adding note
susanharper-okta Jun 30, 2026
0838313
forgot to save
susanharper-okta Jun 30, 2026
cf09410
adding to agent to agent
susanharper-okta Jun 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions packages/@okta/vuepress-site/docs/guides/ai-agent-token-exchange/main/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,8 @@ You can [connect an AI agent](https://help.okta.com/okta_help.htm?type=oie&id=ai

- Resource server: Uses a third party access token issued by the third-party authorization server and brokered by Okta. This resource type requires user consent before an AI agent can act on behalf of the user.

> **Note**: The **Resource server** resource type in this guide covers both the **Application** and **MCP Server** resource types. These types support the brokered consent (STS) flow.

Ater the resource type is configured and the AI agent has the token or credentials, it can then perform tasks on the connected app.

## Token Exchange flow
Expand Down
3 changes: 3 additions & 0 deletions packages/@okta/vuepress-site/docs/guides/ea-ai-agent-token-exchange/main/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,9 @@ Learn how to configure token exchange for agent-to-agent connections so that AI
- A registered AI agent in your Okta org. See [Add and register AI agents](https://help.okta.com/okta_help.htm?type=oie&id=ai-agent-register).
> **Note**: If you're using the agent-to-agent connection type, you need two registered AI agents.
- A **Resource connection** that's configured for the AI agents, defining which resources they're allowed to access. See [Connect AI agents to resources](https://help.okta.com/okta_help.htm?type=oie&id=ai-agent-app-connection).

> **Note**: The **Resource server** resource type in this guide covers both the **Application** and **MCP Server** resource types. These types support the brokered consent (STS) flow.

- A delegation link that's configured for each AI agent, defining the users, apps, and other AI agents that can authorize the AI agent to act on their behalf. See the **Add delegations** section of the [Add AI agents manually](https://help.okta.com/okta_help.htm?type=oie&id=ai-agent-add-manually) page.

---
Expand Down