tl;dr: The Model Context Protocol's Enterprise-Managed Authorization (EMA) extension is now stable, letting organizations centrally manage MCP server access through their identity provider instead of requiring per-user, per-server OAuth consent. It uses an Identity Assertion JWT Authorization Grant (ID-JAG) obtained during SSO to exchange for access tokens, enabling single sign-on across all connected MCP servers. Early adopters include Okta (first IdP), Anthropic and VS Code (clients), and servers like Asana, Atlassian, Figma, Linear, and Supabase.