Enterprise Managed Auth for connectors changedconnectors/building/enterprise-managed-auth
Nearest release: v2.1.318, published under an hour before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 3 Nov 2026 22:35 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 3 Nov 2026 22:37 UTC.
Upstream edited
Recorded here
Lines+2added
Lines−2removed
From line
172
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits15to this page, all time
The whole hunk
from line 172, old and new numbered
/
from line 172
172172
173173Pick the organization by the kind of assertion you're testing:
174174
175* **Claude-issued**: test this kind first, because the organization needs no single sign-on (SSO), verified domain, or identity provider, so a Team organization that you create for testing qualifies as it is. Don't use an organization that signs in to Claude through Okta, because **Claude-issued** isn't available in one that does.
175* **Claude-issued**: test this first, because the organization needs no single sign-on (SSO), verified domain, or identity provider, so a Team organization that you create for testing qualifies as it is. Don't use an organization that signs in to Claude through Okta, because **Claude-issued** isn't available in one that does.
176176* **Identity provider-issued**: use an organization that signs in to Claude through Okta. If your company's organization does, test there. Otherwise, you need an Okta org, such as an integrator org from Okta's [Integrator Free Plan](https://developer.okta.com/signup/), and a Team organization that you create. Follow [Set up single sign-on](https://support.claude.com/en/articles/13132885-set-up-single-sign-on-sso) to verify a domain for the Team organization and connect SSO, choosing Okta as the provider. In the Okta org, give yourself and each test user an address on that domain. Sign in to Claude through SSO before you run the connection test.
177177
178To test both kinds of assertion, use two organizations, because **Claude-issued** isn't available in an organization that signs in to Claude through Okta.
178To test both kinds of assertion in one organization, test **Claude-issued** first, then connect Okta single sign-on and switch the connector to **IdP-managed**. A connector set up with **Claude-issued** keeps working after you connect Okta, but once you switch it, the setup doesn't offer **Claude-issued** again unless you remove single sign-on from the organization. To test in either order, use two organizations.
179179
180180### Add your connector and run the connection test
181181
No line in this hunk matches that.