Skip to main content
By default, signing in to MCP Manager is service-provider-initiated: the user starts at MCP Manager, enters their work email, and MCP Manager routes them to your IdP. You can also add an MCP Manager tile to your IdP dashboard that signs users in directly — one click takes them straight into MCP Manager through your IdP, with no email to type. The tile points at a sign-in URL that already names your workspace’s connection, so MCP Manager knows which IdP to use without asking.
The tile requires a working SSO connection. Set up SSO first; the tile is an optional addition for IdP-initiated launch.

​
Configure the tile

1

Allow IdP-initiated launch

In the OIDC application’s general settings, set Login initiated by to allow both the IdP and the app (in Okta, Either Okta or App), and enable Display application icon to users.
2

Set the initiate-login URI to your tenant-scoped sign-in URL

Set the application’s Initiate login URI to the workspace-specific MCP Manager sign-in URL we provide during onboarding. It has the form:
https://gateway.mcpmanager.ai/auth/login?tenant=your-workspace-tenant
The tenant value identifies your workspace’s enterprise connection and is specific to your organization — MCP Manager gives you the exact value; do not guess it. Because the URL carries the tenant, clicking the dashboard tile sends the user straight to MCP Manager and through your IdP, signed in without entering their email.
3

Assign the MCP Manager icon to the tile

Click this link to download the MCP Manager icon seen below.The image below will be rendered through our CDN as an AVIF format, but the link above will bypass the CDN and serve you the raw PNG.
Mcp Manager Logo Vertical 1
4

Assign the application to your users

Assign the OIDC application to the users or groups who should see and use the tile.
The tile only appears for users who are assigned to the OIDC application in your IdP. This is separate from SCIM provisioning assignment — a user assigned for provisioning but not assigned to the OIDC application will not see the tile and cannot launch from it. See SCIM provisioning.
A user assigned to the application sees the MCP Manager tile on their IdP dashboard, and clicking it lands them in MCP Manager signed in — no email entry.

​
Troubleshooting

The tile requires the OIDC application to allow IdP-initiated launch (in Okta, Either Okta or App), to display its icon to users, and to have its Initiate login URI set to the tenant-scoped sign-in URL we provide (https://gateway.mcpmanager.ai/auth/login?tenant=your-workspace-tenant). Confirm those settings, that the tenant value matches the one MCP Manager gave you, and that the user is assigned to the OIDC application.

​
Further reading

Single Sign-On (SSO)

How MCP Manager brokers enterprise sign-in and what you provide to connect your IdP.

SCIM provisioning

Automatically create users and sync IdP groups to MCP Manager teams.