Enterprise-Managed Authorization
The stable EMA extension lets organizations centralize MCP server access through an identity provider instead of requiring every employee to authorize every server separately.
Why enterprises need it
- Central onboarding and offboarding.
- Group/role-based access policies.
- Corporate SSO.
- Auditable organization-level server access.
High-level flow
The enterprise IdP evaluates policy and can issue an identity assertion grant; the MCP authorization infrastructure exchanges/validates it according to the extension flow and maps identity claims to permissions.
Client support matters
EMA is optional. Both client and server infrastructure need to implement the extension.