Claude has introduced a new feature allowing administrators to provision MCP connectors for their entire organization through identity providers, starting with Okta. This enhancement ensures that users automatically gain access to connectors upon their first login, with centralized authorization managed by their organization.
Previously, enabling connectors required two steps: first, admins would enable the connector for the organization, and then each user had to authorize it individually. The new enterprise-managed authorization streamlines this process, allowing admins to authorize a connector once. Users then inherit access based on their existing IdP groups and roles, providing a seamless experience the first time they open Claude.
Benefits of Enterprise-Managed Authorization
This feature is the first implementation of the Enterprise-Managed Authorization extension to the Model Context Protocol, built on an open standard that supports any connector, including custom ones. Key benefits include:
- Zero-touch setup: Users do not need to take additional steps to set up connectors.
- Consistent access: Access remains uniform across Claude chat, Claude Code, and Cowork.
- Streamlined management: Administrators can manage access through the same workflow as other tools, allowing for quick revocation when needed.
Security and Control
Admins can enforce that connectors only connect through the IdP, ensuring a clear separation between work and personal accounts. This setup enhances security by integrating connector access with existing identity provider controls.
Supported Providers
At launch, Okta is the primary identity provider supported, with plans for additional providers in the future. MCP providers like Asana, Atlassian, Canva, Figma, Granola, Linear, and Supabase also support this feature, with Slack expected to join soon.
Real-World Applications
Organizations like Hubspot, Ramp, and Webflow are already implementing enterprise-managed authorization. This feature is particularly beneficial for large teams, as it simplifies the onboarding process and enhances productivity.
Availability
Enterprise-managed authorization is currently in beta for customers on the Claude Team and Enterprise plans. Interested identity and MCP providers can apply to join the beta program.
Conclusion
This new feature marks a significant advancement in how organizations can manage access to Claude's connectors, enhancing both security and user experience while facilitating a more efficient workflow.
