← English news
Priority 4/5

Supabase Introduces Okta-Managed Enterprise Authentication for its Model Context Protocol Server

Supabase has introduced Okta-managed authentication for its Model Context Protocol server, enabling centralized access control for database operations initiated via Claude. This update eliminates individual OAuth approval loops by integrating database permissions into existing corporate directory lifecycles.

Supabase Introduces Okta-Managed Enterprise Authentication for its Model Context Protocol Server

Supabase has announced the general availability of enterprise-managed authentication integrated with Okta for its Model Context Protocol (MCP) server. Developed in collaboration with Anthropic, this integration allows IT administrators to grant, restrict, or revoke access to database operations initiated via Claude using their primary identity provider. Previously, linking Claude to a Supabase database required individual users to complete manual OAuth authorization steps, while organization owners managed connection-level permissions. Under the new centralized model, administrators can approve the integration once, allowing employees to instantly access authorized databases based on their existing corporate credentials. This capability is currently available for Supabase Team and Enterprise plan customers, bringing Claude-based workflows into alignment with corporate security frameworks like access reviews and centralized offboarding. Supabase plans to expand this security governance in the future with upcoming support for SCIM-based directory provisioning.

Primary source

Open Supabase Blog ↗

This article summarizes the source. Check the original for full details and conditions.

Comparison

AspectBefore / AlternativeAfter / This
Authentication ScopeIndividual OAuth approval required for every user connectionOne-time administrator-managed connection approval for the organization
Access GovernanceRestricted solely to organization ownersGranular user permissions mapped through Okta identity directory
User Lifecycle ManagementManual and disjointed offboarding of developers from Claude connectionsAutomatic revocation via central Okta directory offboarding
Available PlansAll tiers using standard GitHub or email loginsSupabase Team and Enterprise plans