Supabase has introduced enterprise-managed authentication for its MCP server, allowing Claude to issue identity assertions. This change benefits organizations using identity providers that do not support the MCP Enterprise-Managed Authorization extension.
What happened
This feature allows Claude, a tool by Supabase, to issue the signed identity assertion that previously had to come from an identity provider. After a Supabase organization's owner or admin approves Claude and registers it as the issuer, every member with a matching Supabase SSO identity can use Supabase from Claude with their existing role and no per-member consent screen. This update is generally available to Team and Enterprise organizations with SSO configured, and the Claude auto-connect beta is open to Claude Team and Enterprise organizations.
In the Fathom Layer index
What to weigh
- Claude can now issue identity assertions for MCP.
- No changes are required in the identity provider.
Source: Supabase