This blog post explains the newly introduced ID-JAG (Identity Assertion JWT Authorization Grant), detailing the cross-app access challenges it addresses and the interaction flow among the requesting app, resource app, and enterprise Identity Provider (IdP).