Reported News
Claude can now sign employees in to plugins itself: Claude-issued auth beta for Team and Enterprise
Claude Team and Enterprise admins can now turn on Claude-issued auth (beta), in which, per Anthropic's Help Center, "Claude sends a signed assertion to the connector", so members are connected on first use without signing in. The beta covers 14 named connectors, including Atlassian, Figma, Linear, Notion and Supabase, which announced its side on November 3, 2026.
- Changes reported
- 6
- listed below, each from a source we read
- We tested
- Not tested yet
- reported from sources; we did not run it ourselves
- Gaps we flag
- 3
- things we could not verify
- Sources
- 3
- 2 primary, linked below
What changed
| # | What the source says | Status |
|---|---|---|
| 01 | Enterprise-managed auth for Claude connectors now has a second identity source. Besides IdP-managed auth (generally available, Okta only), admins can pick Claude-issued auth (beta), where Claude itself signs the sign-in under an issuer URL unique to the organization, with no identity provider or SSO required. | Reported |
| 02 | Members of the roles an admin selects find the connector already connected the first time they need it, with no sign-in page or consent screen. Users are matched by email, so anyone whose Claude email does not match an account in the service gets the usual Connect prompt. | Reported |
| 03 | Setup is per connector: in Organization settings > Connectors, choose Claude-issued under Managed authorization, copy the issuer URL, add it as a trusted issuer in the service's admin console, add a tenant ID if the service has one, then test and enable. | Reported |
| 04 | The Help Center lists 14 connectors in the Claude-issued beta: Amplitude, Apollo.io, Atlassian, Datadog, Dropbox, Figma, Granola, HubSpot, Linear, Mixpanel, Notion, PagerDuty, Semrush and Supabase. Other MCP providers have to add support on their side first. | Reported |
| 05 | Security trade-off stated by Anthropic: Claude checks organization membership only, not SSO, MFA or the service's own sign-in rules. Removing someone from Claude stops new sign-ins, but access already granted lasts until it expires, so admins must also remove them from each service. | Reported |
| 06 | Supabase's side is generally available for Team and Enterprise organizations with SSO. Supabase trusts one issuer per SSO provider, so switching to the Claude issuer makes it reject assertions from your identity provider, including for other AI tools, until the original URL is restored. | Reported |
reported by the sourcemeasured or run by usnot verified
Primary source: Claude Help Center: Auto-connect your organization's apps to Claude. We are the fast, independent index; the vendor’s own page is the source of record for this release.
In the source’s words
“Claude checks organization membership only, not SSO, MFA, or the connector's own sign-in rules.”
“Okta was the only identity provider that supported the extension at launch and most still don't.”
“Disabling a member in your identity provider no longer cuts off their access”
Early verdict
Worth turning on for Team and Enterprise organizations without Okta that use several of the 14 beta connectors, but treat offboarding as a manual two-place job: Claude vouches for membership only, and removal does not cascade.
Basis: Based on the limits Anthropic and Supabase state in their own documentation; we have not tested it.
What we have not verified
- We did not set up Claude-issued auth ourselves; everything here is from Anthropic's Help Center and Supabase's post.
- The Help Center gives no date for the change; the November 3, 2026 date comes from Supabase's post and third-party reports of the announcement.
- We did not confirm that each of the 14 beta connectors has finished its own side of the setup; some providers may need extra steps such as SSO, per the Help Center.
This brief is Reported: written from the sources below, not from running the release ourselves.
Sources
- Claude Help Center: Auto-connect your organization's apps to Claudeprimary source · fetched 2026-11-04
- Supabase blog: Enterprise-managed auth for MCP, Claude can now issue the identity assertionprimary source · fetched 2026-11-04
- The New Stack (coverage)source · fetched 2026-11-04
Related
Spotted an error? See our corrections policy or email the address on the contact page. Markdown version for agents: /news/claude-issued-auth-plugin-auto-connect-beta.md
Want these briefs in your Google Top Stories? Add Agentic Weekly as a preferred source on Google.
Newsletter
The Weekly Verdict. Free, every Monday.
A free email every Monday: the week's few big AI releases, then 5 short use cases for the new models, each with a prompt you can paste.
Free. Double opt-in. One click to unsubscribe.