Follow Discord
Sweep 03 Nov 2026 · 22:27Z Build v2.1.318 536 read Stable v2.1.311 Latest v2.1.318 Next v2.1.318 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeDocsClaude Documentation
One capture · claude-docs

One read of Claude Documentationclaude-docs-20261104T233705Z

1 pages moved out of 281 read.

Pages moved 1 significant first
Pages read 281 in this capture
Captured 23:37 UTC
Corpus hash 929e0bf918c5 corpus-hash

What this read moved

1-1 of 1

connectors/building/enterprise-managed-auth Changed · +5 / -3 lines

from line 1
11# Enterprise Managed Auth for connectors
22 
3> Accept identity assertions from a customer's identity provider or Claude so users connect to your MCP server without an OAuth consent step.
3> Support auto-connect in Claude by accepting identity assertions from a customer's identity provider or from Claude, so users skip the OAuth consent step.
44 
55> [!NOTE]
66>
from line 8
88 
99Enterprise Managed Auth (EMA) lets organizations connect their users to your MCP server without sending each user through an OAuth consent screen. Claude presents your authorization server with an identity assertion instead: a signed JSON Web Token (JWT) issued by [the customer's identity provider or by Claude](#who-issues-the-identity-assertion). Your authorization server validates the assertion and returns an access token.
1010 
11As a connector developer, you [make your authorization server accept and validate the assertion](#authorization-server-requirements), [test your implementation](#test-your-implementation), and [give customer administrators the settings and documentation they need](#support-customer-administrators).
11Claude calls this feature auto-connect, for identity provider-issued and Claude-issued assertions alike. The connector directory labels listings marked as supporting it **Auto-connect**.
1212 
13To support auto-connect, you [make your authorization server accept and validate the assertion](#authorization-server-requirements), [test your implementation](#test-your-implementation), and [give customer administrators the settings and documentation they need](#support-customer-administrators).
14 
1315## Understand how Enterprise Managed Auth works
1416 
1517The diagram shows the exchange between Claude, your authorization server, and your MCP server. Your MCP server receives the same kind of bearer token it would after the interactive OAuth flow.
from line 228
226228 
227229## Support customer administrators
228230 
229A customer's administrator turns on Enterprise Managed Auth for their organization.
231A customer's administrator turns on Enterprise Managed Auth for their organization. For a connector added from the directory, an Owner or Primary Owner clicks **Set up auto-connect** on its row in [**Organization settings > Connectors**](https://claude.ai/admin-settings/connectors), which opens the managed authorization setup. Claude's guide for administrators is [Auto-connect your organization's apps to Claude](https://support.claude.com/en/articles/15537633-auto-connect-your-organization-s-apps-to-claude).
230232 
231233### Admin settings in your product
232234 
Feedback