Launch Week | Connected Apps: Make Any App an OAuth Provider for Integrations and AI Agents

Today we’re introducing Connected Apps—a powerful new feature that makes it easy for your application to be integrated with AI agents, third-party apps, and multi-app ecosystems. With Connected Apps, your application can become an OAuth 2.0 identity provider, delegating access and permissions to build seamless integrations with other first-party and third-party applications. Read the official blog post for the full breakdown.

What Is Connected Apps Exactly?

Connected Apps is a Stytch OAuth feature that enables you to configure any app as a fully compliant OAuth 2.0/OIDC Identity Provider with just a few steps in the dashboard and a few lines of code using the frontend SDK component.

You can follow our getting started guide for step-by-step instructions on how to configure your first Connected App.

For each integration, you create a Connected App and configure their settings:

• Client types: Categorize each Connected App as a first or third-party application to align end-user consent flows with appropriate trust levels.

• Custom scopes: Set granular permissions by defining the exact levels of access each Connected App Client can request within issued access tokens.

• Custom claims: Define specific claims to include in the access token.

• Secret rotation and PKCE: Manage client secrets or implement PKCE to create a secure exchange.

• Redirect URLs: Specify allowed callback URLs for OAuth flow completions.

Building with Connected Apps

Whether you’re building AI-agent workflows or an enterprise integration, Connected Apps makes it easy for you to authenticate users, grant scoped permissions, and share data with other applications. With your app as the identity provider, Stytch brings all your connected applications into one place, making it easier to scale, control access, and manage permissions across all your integrations.

Once configured, you can leverage Connected Apps to:

• Issue access tokens to third-party apps to facilitate secure data sharing.

• Transfer authentication state from browsers to extensions, plugins, and desktop apps without having to force users to re-enter credentials.

• Enable seamless cross-domain navigation between distinct domains without terminating a user’s session (e.g. moving from Gmail to YouTube to Google Docs).

• Authenticate AI agents that can perform delegated tasks across all the apps a user is registered with within the OAuth framework.

Getting Started

Ready to explore Connected Apps? Check out our step-by-step guide in the developer docs and sign up for a free developer account if you don’t have one already.

Happy building and stay tuned for the rest of Launch Week!

Follow us on X for daily product announcements.