Enterprise-managed auth is GA and your MCP server needs a new grant type

Anthropic made enterprise-managed authorization for Model Context Protocol connectors generally available on August 24, 2026, allowing Claude Team and Enterprise administrators to provision connector access centrally through Okta rather than requiring each employee to complete interactive OAuth consent flows. The system uses the Identity Assertion JWT Authorization Grant (ID-JAG), in which Claude exchanges an identity-provider-issued signed JWT for an access token through an authorization server’s token endpoint, enabling silent authentication and retrying of tool calls after authorization failures. MCP server operators must support and advertise the JWT bearer grant, use pre-registered stable client identities instead of Dynamic Client Registration, validate assertions against per-tenant issuer allowlists, map users reliably through subject and email claims, and consider shorter access-token lifetimes to improve deprovisioning response times. The approach is supported across Claude products and is also appearing in VS Code preview features, while connector adoption includes services such as Datadog, Notion, Slack, and Supabase. Interactive OAuth remains necessary for organizations without compatible identity providers, and Okta is the only supported provider at launch, but the development reflects a broader shift toward administrator-controlled, policy-based authorization for AI tool access.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.