MCP's Enterprise-Managed Authorization went stable, backed by Anthropic, Microsoft, and Okta.

The EMA extension lets organizations gate MCP server access through their existing identity provider instead of per-server static credentials. That directly attacks the long-flagged authentication crisis where most MCP auth was static tokens sitting in config. If you run MCP servers internally, IdP-brokered access is now the default enterprise path, and there's no good excuse left for shipping static creds.