---
schema: 1
type: video
title: 'One Login to Rule Them All: Cross-App Access for MCP — Garrett Galow, WorkOS'
description: >-
  Connecting a coding agent to multiple services often means facing a dozen
  OAuth consent screens, a dozen token lifecycles, and a dozen chances for
  something to break. Despite having Single Sign-On, users still find themselves
  signing in repeatedly. This talk explores how Cross-App Access leverages a
  three-way trust between the MCP client, the MCP server, and the organization's
  Identity Provider to simplify authentication. Through the Identity Assertion
  Authorization Grant flow, a single SSO login is transformed into access tokens
  across every MCP server, offering seamless access to all applications. The
  session will also highlight what this pattern enables for agent identity
  beyond MCP. Speaker info: https://www.linkedin.com/in/garrett-galow/ --- Watch
  along with the corrected transcript, summary, timestamps and resources on this
  talk's official AIE page:
  https://ai.engineer/talks/EmhRyw6xeT0-one-login-to-rule-them-all-cross-app-access-for-mcp
  Join our upcoming AI Engineer conferences (see https://ai.engineer landing
  page): - AIEi Shanghai, November 5–6 — the first for meeting top Chinese labs
  and engineers - AIE CODE in SF, November 10–12 — the top AI Coding conference
  returns - AIEi Sydney, December 7–8 — the first AIEi run alongside NeurIPS
  2026 in Sydney ---
canonical: 'https://liquidgold.cc/watch/EmhRyw6xeT0'
markdown: 'https://liquidgold.cc/watch/EmhRyw6xeT0.md'
llms: 'https://liquidgold.cc/watch/EmhRyw6xeT0/llms.txt'
parent: 'https://liquidgold.cc/channel/aidotengineer.md'
channel: aidotengineer
updated: '2026-10-24T14:48:49.364Z'
language: null
children: []
videoId: EmhRyw6xeT0
durationSeconds: 1404
publishedAt: '2026-04-28T14:00:06.000Z'
searchChunks:
  - ordinal: 0
    text: null
    startSeconds: 25
    endSeconds: 147
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=25'
    heldReason: rights
  - ordinal: 1
    text: null
    startSeconds: 158
    endSeconds: 247
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=158'
    heldReason: rights
  - ordinal: 2
    text: null
    startSeconds: 247
    endSeconds: 258
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=247'
    heldReason: rights
  - ordinal: 3
    text: null
    startSeconds: 258
    endSeconds: 347
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=258'
    heldReason: rights
  - ordinal: 4
    text: null
    startSeconds: 347
    endSeconds: 357
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=347'
    heldReason: rights
  - ordinal: 5
    text: null
    startSeconds: 357
    endSeconds: 449
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=357'
    heldReason: rights
  - ordinal: 6
    text: null
    startSeconds: 459
    endSeconds: 572
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=459'
    heldReason: rights
  - ordinal: 7
    text: null
    startSeconds: 583
    endSeconds: 662
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=583'
    heldReason: rights
  - ordinal: 8
    text: null
    startSeconds: 673
    endSeconds: 803
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=673'
    heldReason: rights
  - ordinal: 9
    text: null
    startSeconds: 803
    endSeconds: 813
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=803'
    heldReason: rights
  - ordinal: 10
    text: null
    startSeconds: 813
    endSeconds: 902
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=813'
    heldReason: rights
  - ordinal: 11
    text: null
    startSeconds: 913
    endSeconds: 1035
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=913'
    heldReason: rights
  - ordinal: 12
    text: null
    startSeconds: 1045
    endSeconds: 1157
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=1045'
    heldReason: rights
  - ordinal: 13
    text: null
    startSeconds: 1169
    endSeconds: 1294
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=1169'
    heldReason: rights
  - ordinal: 14
    text: null
    startSeconds: 1305
    endSeconds: 1404
    watch: 'https://liquidgold.cc/watch/EmhRyw6xeT0?t=1305'
    heldReason: rights
---


# One Login to Rule Them All: Cross-App Access for MCP — Garrett Galow, WorkOS

Connecting a coding agent to multiple services often means facing a dozen OAuth consent screens, a dozen token lifecycles, and a dozen chances for something to break. Despite having Single Sign-On, users still find themselves signing in repeatedly. This talk explores how Cross-App Access leverages a three-way trust between the MCP client, the MCP server, and the organization's Identity Provider to simplify authentication. Through the Identity Assertion Authorization Grant flow, a single SSO login is transformed into access tokens across every MCP server, offering seamless access to all applications. The session will also highlight what this pattern enables for agent identity beyond MCP. Speaker info: https://www.linkedin.com/in/garrett-galow/ --- Watch along with the corrected transcript, summary, timestamps and resources on this talk's official AIE page: https://ai.engineer/talks/EmhRyw6xeT0-one-login-to-rule-them-all-cross-app-access-for-mcp Join our upcoming AI Engineer conferences (see https://ai.engineer landing page): - AIEi Shanghai, November 5–6 — the first for meeting top Chinese labs and engineers - AIE CODE in SF, November 10–12 — the top AI Coding conference returns - AIEi Sydney, December 7–8 — the first AIEi run alongside NeurIPS 2026 in Sydney ---

Canonical: https://liquidgold.cc/watch/EmhRyw6xeT0 · Channel: [AI Engineer](https://liquidgold.cc/channel/aidotengineer.md)

> Search chunk text is held until public-source provenance is verified.

## Document chunks

> Missing: no stored document chunks are available.