Set up OIDC for Okta XAA

Normally, the Figma MCP server requires each user to follow an OAuth login flow to get access. However, you may want to manage this access centrally, so members sign in once through your identity provider and aren't interrupted by repeated login and consent prompts.

You can do this with enterprise-managed authorization (XAA), an enterprise-grade way to centralize MCP access in Claude and remove sign-in friction. Instead of each member authorizing the Figma connector on their own, access is brokered by Okta: a member signs in once through Okta, and Claude can then work across approved MCP servers without asking that member to authorize again.

To set up OIDC for Okta XAA:

1. Set up SAML SSO with Okta for your organization.
2. Follow Anthropic's guide to configure MCP connectors for a whole organization and obtain your OIDC issuer URL.
3. From the file browser, click Admin.
4. Select Settings at the top of the screen.
5. In the Login and provisioning section, click OIDC Issuer URL.
6. Paste the issuer URL you received following Anthropic's guide.
7. Click Save.