BREAKING
Claude Adds Enterprise Auth to MCP
Central Admin Control for Connectors
Old vs New MCP Auth
Prior MCP Auth
Old
●
Per-user approval
●
OAuth / static secrets
●
Cumbersome revocation
Enterprise-Managed
New
●
Central org-level approval
●
IdP-brokered SSO (ID-JAG)
●
Immediate revocation
How the Delegated Flow Works
1
Declare extension
↓
2
Get ID-JAG from IdP
↓
3
Exchange tokens
↓
4
Policy enforced
Open Issues in Self-Hosted Setups
Enterprise Readiness for MCP
AI NEWS BLITZ
Anthropic just brought centralized enterprise authorization to the Model Context Protocol.