One read of Claude Documentationclaude-docs-20260824T203707Z
1 pages moved out of 216 read.
Pages moved
1
significant first
Pages read
216
in this capture
Captured
20:37 UTC
Corpus hash
f5f08c78f122
corpus-hash
What this read moved
1-1 of 1connectors/building/enterprise-managed-auth Changed · +8 / -4 lines
## Admin settings in your product ## Okta Integration Network apps
from line 3
33> Accept identity assertions from enterprise SSO so users connect to your MCP server without a separate OAuth consent step.
44
55<Note>
6 Enterprise Managed Auth is in beta and is available on Claude Team and Enterprise plans. Organizations can [join the waitlist](https://claude.com/form/ema-waitlist) to request access. MCP server developers and identity provider vendors can [register interest](https://docs.google.com/forms/d/e/1FAIpQLSf1goHGNDVFK7rncYuh6wnRpWSy7eGOcgL1i8uw3oyKFO9UUA/viewform) in supporting this flow.
6 Enterprise Managed Auth is available on Claude Team and Enterprise plans. MCP server developers and identity provider vendors can [register interest](https://docs.google.com/forms/d/e/1FAIpQLSf1goHGNDVFK7rncYuh6wnRpWSy7eGOcgL1i8uw3oyKFO9UUA/viewform) in supporting this flow.
77</Note>
88
99Enterprise Managed Auth (EMA) lets a user connect to your MCP server silently, using the single sign-on session they already have with their organization. Instead of showing each user an OAuth consent screen, Claude presents your authorization server with an **identity assertion**: a signed JSON Web Token (JWT), issued by the customer's identity provider, that vouches for the user's identity.
from line 143
143143* Bring your own OIDC or SAML identity provider in place of the sandbox one
144144* Re-run a single failed step and inspect service configurations, discovery documents, and a live event log
145145
146<Note>
147 Enterprise Managed Auth is in beta. [Register interest](https://docs.google.com/forms/d/e/1FAIpQLSf1goHGNDVFK7rncYuh6wnRpWSy7eGOcgL1i8uw3oyKFO9UUA/viewform) to get onboarded for testing.
148</Note>
146## Admin settings in your product
149147
148In your product's admin settings, give each customer's administrator a control that turns Enterprise Managed Auth on or off for their organization and a field for their identity provider's issuer URL. When the administrator saves, add that URL to the organization's allowlist of trusted issuers, as described in [Authorization server requirements](#authorization-server-requirements).
149
150150## Provide setup documentation
151151
152152You can publish documentation that walks an enterprise administrator through enabling Enterprise Managed Auth for your product and add its URL to [your directory listing](./managing-your-listing). Claude shows the link in the Claude admin console when an administrator sets up Enterprise Managed Auth for your connector.
153
154## Okta Integration Network apps
155
156If your product has an app in the Okta Integration Network, work with Okta to enable Cross App Access (XAA) for that app. Until that app supports Cross App Access, customers who use Okta need to create a custom app in Okta for your product before they can set up Enterprise Managed Auth.
153157
154158## Related resources
155159