Vercel Connect now supports Enterprise-Managed Authorization (EMA) in public beta. Your apps and agents can access supported services on behalf of signed-in users without separate consent prompts for each service.
Here's how access works:
Admin-managed access: Administrators can grant or revoke access to supported services through the identity provider.
Corporate sign-in: Users sign into your app with their corporate account through a compatible identity provider such as Okta.
Scoped tokens: Your app requests the scopes it needs, and Connect handles token exchange, caching, and renewal. Access is limited to approved scopes and the user’s existing service permissions.
If your app uses [Vercel Passport](https://vercel.com/passport), you can request a token for [Slack’s Model Context Protocol (MCP) server](https://docs.slack.dev/authentication/enterprise-managed-authorization/) with the signed-in user’s identity:
type: embedded-entry-inline id: 1T9cFkjaRDDmRFQ5bWVmD6
Connect supports Cross-App Access (XAA), including its use for MCP authorization through EMA. Follow the Vercel Connect EMA setup guide to configure your identity provider and services and enable EMA on their Connect connectors.