<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Enterprise SaaS on Control Plane by Karl McGuinness</title><link>https://notes.karlmcguinness.com/tags/enterprise-saas/</link><description>Recent content in Enterprise SaaS on Control Plane by Karl McGuinness</description><generator>Hugo</generator><language>en-us</language><managingEditor>public@karlmcguinness.com (Karl McGuinness)</managingEditor><webMaster>public@karlmcguinness.com (Karl McGuinness)</webMaster><lastBuildDate>Sun, 19 Apr 2026 20:05:00 -0700</lastBuildDate><atom:link href="https://notes.karlmcguinness.com/tags/enterprise-saas/index.xml" rel="self" type="application/rss+xml"/><item><title>Enterprise SaaS Needs OAuth Federation Now</title><link>https://notes.karlmcguinness.com/notes/enterprise-saas-needs-oauth-federation-now/</link><pubDate>Sun, 19 Apr 2026 20:05:00 -0700</pubDate><author>public@karlmcguinness.com (Karl McGuinness)</author><guid>https://notes.karlmcguinness.com/notes/enterprise-saas-needs-oauth-federation-now/</guid><description>Enterprise SaaS still defaults to app-by-app OAuth islands with their own clients, long-lived artifacts, and revocation paths. The architectural shift is OAuth federation: adopt issuer-mediated federation now for services and workloads, and adopt Cross-App Access (XAA) as the standards direction for user-delegated cross-app access.</description></item></channel></rss>