Does Zoom AI Companion (MCP Client) support MCP Enterprise-Managed Authorization?

Nithish · June 22, 2026, 8:32am

Hi all,

We’re integrating an MCP server with Zoom AI Companion (acting as the MCP Client) and want to confirm support for the Enterprise-Managed Authorization model from the MCP Authentication Specification — not the OAuth 2.1 + Dynamic Client Registration (DCR) flow.

Reference spec:

github.com/modelcontextprotocol/ext-auth

specification/stable/enterprise-managed-authorization.mdx

main

---
title: Enterprise-Managed Authorization
---

<Info>**Status**: Stable</Info>

## 1. Introduction

### 1.1 Purpose and Scope

This document defines an application of the "[Identity Assertion JWT Authorization Grant](https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/)" for use within enterprise deployments of the Model Context Protocol (MCP).

When an MCP Client and MCP Server are both enabled for single sign-on through an enterprise Identity Provider, this three-way relationship can be leveraged to streamline the authorization process.

This document specifies how an MCP Client can obtain an access token from an MCP Server's authorization server by presenting an identity assertion it previously obtained from an enterprise Identity Provider during single sign-on, and how that authorization server validates the request before issuing an access token.

This profile is designed to facilitate secure and interoperable authorization within enterprise environments, leveraging the organization's existing identity infrastructure. Enterprise-managed authorization for MCP Clients and Servers has some key benefits:

- For end users, this removes the need to manually connect and authorize the MCP Client to each MCP Server for use within the organization.
- For enterprise admins, this enables visibility and control over which MCP Servers are able to be used within the organization.

This file has been truncated. show original

Intended architecture:

Zoom AI Companion → MCP Client
Okta → enterprise IdP and Authorization Server
Our MCP Server → trusts enterprise-issued tokens and validates them per the Enterprise-Managed Authorization spec
Authn/authz managed centrally by the enterprise — no per-user OAuth consent flows, no DCR

Questions:

Does AI Companion support Enterprise-Managed Authorization as an MCP Client (trusting tokens minted by an external enterprise AS like Okta)?
If so, where is the issuer/audience/trusted-AS configuration surfaced for an account admin?
Are there constraints on token format (JWT vs. opaque), required claims, or resource indicators (RFC 8707) the client expects?

For context, Anthropic’s Claude recently added Enterprise-Managed Authorization support for MCP integrations, which aligns closely with what we’re targeting.

A Tier 2 support ticket (TS2362165) was closed as “configuration-related” and routed here, so confirming the supported model would unblock us.

Thanks!

Topic		Replies	Views
Auth type client_credential for zoom API and SCIM scope Authentication	0	76	October 29, 2024
Authenticate in a machine-to-machine context Authentication	4	323	September 22, 2023
Request for Preliminary Confirmation Regarding SaaS Integration with Zoom App Marketplace api	1	29	November 5, 2025
Server-to-Server OAuth App for Multi-Tenant SaaS Use App Marketplace api	1	35	November 5, 2025
Inquiry Regarding Zoom API Integration for Enterprise SaaS System Meetings api	0	29	November 3, 2025

Does Zoom AI Companion (MCP Client) support MCP Enterprise-Managed Authorization?

Related topics