CLAIM-2026-08-27-07

The Enterprise-Managed Authorization extension is opt-in and never active by default, and support for it varies by MCP client.

Why it matters

Adopting it at the identity provider says nothing about the clients in the estate. The unsupported ones keep doing per-user OAuth and will not appear in the admin console.

Sources

• modelcontex2026enterpris