
Enterprise-Managed Authorization gives Vercel Connect apps and agents access to supported services on behalf of signed-in users, without showing a separate consent prompt for every service. The feature is now in public beta.
Administrators control that access through a compatible identity provider. Vercel’s changelog names Okta as one example. An admin can grant or revoke access centrally, while each user signs into the app with their corporate account.
How Enterprise-Managed Authorization works
Once the user has signed in, the app requests the scopes it needs. Connect handles the token exchange, caching and renewal needed to maintain access to the supported service.
- 1
Approve the service
an administrator grants access through a compatible identity provider
- 2
Sign in
the user enters the app with their corporate account
- 3
Request scopes
the app asks for the permissions required for its task
- 4
Manage tokens
Connect exchanges, caches and renews the tokens
The app does not receive open-ended access. Its actions remain limited by the approved scopes and by the permissions that the signed-in user already has within the connected service.
This creates two layers of control. The administrator decides whether the service can be accessed through the identity provider. The user’s existing service permissions still determine what the app or agent can do after authentication.
What changes for app builders
Without Enterprise-Managed Authorization, users may need to approve access separately for each service used by an app or agent. The public beta moves that approval into an organisation’s identity system, while Connect takes responsibility for the underlying token lifecycle.
Admins can also revoke access from the identity provider rather than managing consent separately inside every app. Builders still define the scopes their app needs, and those scopes remain subject to the user’s existing permissions.
Frequently asked questions
What is Enterprise-Managed Authorization in Vercel Connect?
Enterprise-Managed Authorization lets apps and agents access supported services for signed-in users without requiring a separate consent prompt for every service. Administrators manage access through a compatible identity provider, while Connect handles token exchange, caching and renewal.
Which Vercel plan includes Enterprise-Managed Authorization?
Enterprise-Managed Authorization is available in public beta. Vercel has not published pricing or plan eligibility in this announcement.
How is access restricted with Enterprise-Managed Authorization?
Access is restricted to the scopes approved for the app. The app or agent also remains limited by the signed-in user’s existing permissions within the connected service.
Sources
3 checkedHow we cover tool news: Create With's tool desk drafts these reports with AI from the sources listed above and checks them against those sources before publishing.








