{"slug": "enterprise-managed-authorization-zero-touch-oauth-for-mcp", "title": "Enterprise-Managed Authorization: Zero-touch OAuth for MCP", "summary": "The Enterprise-Managed Authorization (EMA) extension for the Model Context Protocol (MCP) is now stable, enabling organizations to centrally manage OAuth authorization for MCP servers and allowing end-users to access all connected servers with a single login. The extension, adopted by Anthropic, Microsoft, and Okta, eliminates per-user consent prompts and enforces consistent security policies through the organization's identity provider.", "body_md": "*The Enterprise-Managed Authorization extension is now stable. Organizations can centrally\nmanage authorization for MCP servers and end-users can access all connected MCP servers\nthrough a single log in. The extension is being adopted by Anthropic, Microsoft, Okta and\na growing number of MCP servers.*\n\nThe [Enterprise-Managed Authorization (EMA) extension](https://modelcontextprotocol.io/extensions/auth/enterprise-managed-authorization)\nis now stable. We’ve heard from the community that authorization and repeated consent\nprompts from connected MCP servers is one of the biggest pain points when it comes to\nmanaging connectivity in enterprise environments. This extension helps address this.\n\nEMA allows organizations to control MCP server access centrally through their trusted identity provider. For end-users, this means a zero-touch setup: the MCP servers they need are connected on first login, with no per-app OAuth and nothing to configure as a one-off.\n\n## Per-user auth is high friction[#](#per-user-auth-is-high-friction)\n\nThe standard MCP authorization model was designed to be user-scoped and bound to the traditional interactive auth conventions. While this might work well for more general consumer scenarios where individuals decide what touches their data, this doesn’t quite scale for enterprise deployments:\n\n**Every employee has to authorize every server individually**: onboarding means manually connecting service after service.** Security teams cannot enforce consistent policy**: access is whatever each user authorized, with no central control or audit trail.** Work and personal accounts blur together**: there’s no way to require a corporate identity, so a user can connect a personal account to a work tool.\n\nThis combination of factors slows MCP adoption and pushes people toward brittle workarounds. With no universal standard for preserving shared auth state, everyone invents their own bespoke solution. The data and tools are available, but the per-user authorization tax keeps most of them switched off.\n\n## Authorize once, inherit everywhere[#](#authorize-once-inherit-everywhere)\n\n[Enterprise-Managed Authorization](https://modelcontextprotocol.io/extensions/auth/enterprise-managed-authorization)\nmakes the organization’s IdP the authoritative decision-maker for MCP server access.\nAdministrators define the policy once and users can authenticate with their existing\nidentity into the MCP host. The IdP can grant or deny access based on group membership,\nrole, and conditional access rules.\n\nUnder the hood, the client obtains an\n[Identity Assertion JWT Authorization Grant (ID-JAG)](https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/)\nfrom the IdP during single sign-on and exchanges it for an access token from the MCP\nserver’s authorization server. The user is never redirected through a per-server consent\nscreen. Three properties fall out of that flow:\n\n**Authorize once, inherit everywhere:** admins enable a server for the org. Users get it automatically, scoped to the groups and roles they already have.**Centralized policy and audit:** access decisions live in the IdP admin console, with one auditable trail across every connector.**Removing personal/enterprise mixups:** by removing the interactive account selection step, it’s much easier to prevent data flowing between personal and enterprise accounts by mistake or compromise.\n\nWe see this as a brand new baseline for MCP in the enterprise. When users log in, their client should be connected to the tools and data they’re authorized to use with no extra steps in between.\n\n## Early adopters[#](#early-adopters)\n\nThis launch brought together three groups that collaborated closely on making the implementation real:\n\n**Identity providers:** Okta is the first supported identity provider. Organizations using Okta can provision MCP access to supported servers through any supported client, using[Okta’s Cross App Access (XAA)](https://www.okta.com/identity-101/cross-app-access-securing-ai-agent-and-app-to-app-connections/).**Clients:**[Anthropic has implemented the extension](https://claude.com/blog/enterprise-managed-auth)in its shared MCP layer for Claude. Admins can authorize MCP servers for users across Claude, Claude Code, and Cowork. Additionally,[Visual Studio Code has also added support](https://code.visualstudio.com/updates/v1_123#_enterprise-managed-mcp-authentication-preview)for EMA right in the IDE.**Servers:** Asana, Atlassian, Canva, Figma, Granola, Linear and Supabase now support EMA, with Slack and more actively adding support.\n\nWe’re excited for more identity providers, clients, and servers to adopt Enterprise-Managed Auth to help reduce the authorization-related fatigue and significantly improve the security and observability posture for its implementers.\n\n“The momentum around MCP is incredible, but as we move toward an interconnected AI workforce, security can’t be an afterthought. By embedding the Cross App Access protocol into MCP as the Enterprise-Managed Authorization extension, we turn identity into a centralized governance plane and give security teams strict compliance control and users a seamless, secure experience.”\n\n—\n\nAaron Parecki, Director of Identity Standards, Okta\n\n“The Figma MCP brings the power of code and canvas together so teams can move faster, explore more and ship products that stand out. As MCP adoption grows, XAA makes it easier for enterprises to scale their MCP deployments securely without slowing teams down.”\n\n—\n\nDevdatta Akhawe, VP of Engineering, Figma\n\n“Logging in once and automatically having all your MCP connectors automatically setup is pretty magical.”\n\n—\n\nTom Moor, Head of Engineering, Linear\n\n## Get involved[#](#get-involved)\n\nAs with all other MCP extensions, features, and enhancements, we welcome your input. We’re encouraging clients, servers, and identity platforms to review the extension specification and add support for the new standard into their products:\n\n**Read the requirements:** the[Enterprise-Managed Authorization page](https://modelcontextprotocol.io/extensions/auth/enterprise-managed-authorization)documents the flow for clients, servers, and authorization servers.**Source and draft spec:** see the[ext-auth repository](https://github.com/modelcontextprotocol/ext-auth)and the[draft specification](https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/draft/enterprise-managed-authorization.mdx)for the latest in EMA evolution as well as any support materials that will help you get started.\n\nIf you’re interested in discussing the extension, sharing compatibility reports, or\niterating on the extension, join the\n[EMA Interest Group](https://modelcontextprotocol.io/community/interest-groups/enterprise-managed-authorization).\n\n## Acknowledgements[#](#acknowledgements)\n\nEnterprise-Managed Authorization is the work of the MCP community: the authors of\nSEP-990, the maintainers of the\n[ext-auth repository](https://github.com/modelcontextprotocol/ext-auth), and the identity\nand MCP providers\nwho tested early implementations and pushed the spec forward. Thank you to everyone who\ncontributed.", "url": "https://wpnews.pro/news/enterprise-managed-authorization-zero-touch-oauth-for-mcp", "canonical_source": "https://blog.modelcontextprotocol.io/posts/enterprise-managed-auth/", "published_at": "2026-06-18 17:00:00+00:00", "updated_at": "2026-06-18 17:06:39.190670+00:00", "lang": "en", "topics": ["ai-tools", "ai-infrastructure", "ai-ethics"], "entities": ["Anthropic", "Microsoft", "Okta", "Model Context Protocol", "Enterprise-Managed Authorization", "Cross App Access"], "alternates": {"html": "https://wpnews.pro/news/enterprise-managed-authorization-zero-touch-oauth-for-mcp", "markdown": "https://wpnews.pro/news/enterprise-managed-authorization-zero-touch-oauth-for-mcp.md", "text": "https://wpnews.pro/news/enterprise-managed-authorization-zero-touch-oauth-for-mcp.txt", "jsonld": "https://wpnews.pro/news/enterprise-managed-authorization-zero-touch-oauth-for-mcp.jsonld"}}