What is Enterprise-Managed Authorization?
In short:Enterprise-Managed Authorization is the MCP extension that lets a company's identity provider control which MCP servers an agent may reach. It grew out of Cross App Access and was adopted by Anthropic, Microsoft and Okta. It replaces scattered user consent with central policy set by administrators.
How does it work?
The MCP client gets an ID-JAG from the enterprise identity provider and exchanges it at the MCP server's authorization server.
What does it look like in practice?
An admin approves the CRM MCP server for the sales team once, and every sales agent can connect.