PropelAuth Blog | PropelAuth Blog

MCP Default Resource: Connecting OAuth 2.0-Only Clients

MCP Default Resource: Connecting OAuth 2.0-Only Clients

Some MCP clients don't send the resource parameter that the MCP authorization spec requires. Microsoft Copilot Studio is the big one right now: its MCP connector runs a standard OAuth 2.0 authorization code flow, and resource isn't part of it. A spec-compliant authorization server

Auth Providers That Can Secure Your MCP Server (2026 Comparison)

Auth Providers That Can Secure Your MCP Server (2026 Comparison)

Your customers are starting to ask a new question: "Can I connect Claude, ChatGPT, or Cursor to my account in your product?" Saying yes means shipping a remote MCP server, and a remote MCP server needs authentication. The MCP spec settles on OAuth 2.1 for this, so

Multiple Enterprise SSO Connections per Organization

Multiple Enterprise SSO Connections per Organization

An organization in PropelAuth can now connect to more than one identity provider. Employees can log in through Okta, contractors through Entra ID, a newly acquired team through Google Workspace, and all of them end up in the same organization. SAML, OIDC, and SCIM are all supported, and each connection

Best Managed Auth for Startups in 2026

Best Managed Auth for Startups in 2026

Updated September 4, 2026 Short answer: For a B2B startup, PropelAuth is the best managed auth provider in 2026. Organizations, per-organization roles, and unlimited SAML/OIDC enterprise SSO are all included on a flat $150/month plan, so you're covered when a customer asks for SSO and

Secure User Impersonation: Access Controls, Audit Logs & More

Secure User Impersonation: Access Controls, Audit Logs & More

User impersonation is consistently one of our customers’ favorite features. Your team can select a user in the dashboard, click Impersonate User , and immediately access your product as that user. It’s incredibly powerful for debugging customer issues, reproducing unexpected behavior, assisting users, and running realistic sales demos. But, as

User Impersonation Updates: Blocklist, direct links and more

User Impersonation Updates: Blocklist, direct links and more

Impersonation is one of those features that's incredibly useful right up until someone asks "wait, who approved that?" It's great for debugging, support, and demos, but underneath all of that convenience, you're handing an employee the ability to log in as a

What is SCIM? A Practical Guide for B2B SaaS Teams

What is SCIM? A Practical Guide for B2B SaaS Teams

The TL;DR * SCIM (System for Cross-domain Identity Management, pronounced like "skim") is an open standard (RFC 7643 / 7644) that lets an identity provider like Okta, Microsoft Entra ID, or JumpCloud automatically create, update, and deactivate user accounts in your application. * Mechanically, it's a REST

Introducing Member Audit Logs

Introducing Member Audit Logs

Give your customers visibility into their teammates' account activity with Member Audit Logs. Your customers ask for audit logs because they want answers, not just data. Who logged in last Tuesday? Did someone actually reset their password, or is that a support ticket waiting to happen? Did the new

Introducing PropelAuth Session Management

Introducing PropelAuth Session Management

Knowing who's logged in, from where, and being able to do something about it shouldn't require digging through a database. Today, we're making that information a first-class part of your PropelAuth dashboard. We're excited to announce Session Management, a new feature

June 2026 Updates

June 2026 Updates

June has been all about giving you more control and more visibility, from new identity provider support to sharper audit logging and tighter security controls. Here are the highlights: Ping Identity Support We now have first-class support for Ping Identity. Your customers can authenticate via SAML or OIDC, and

Ping Identity Support: SAML, OIDC, and SCIM

Ping Identity Support: SAML, OIDC, and SCIM

PropelAuth now supports Ping Identity across all three of the standards that matter most for enterprise customers: SAML, OIDC, and SCIM. Ping is one of the most established identity providers in the enterprise, and it's a common requirement for companies in finance, healthcare, and other regulated industries. If

Migrate from Clerk and Auth0 with PropelAuth's MCP Server

Migrate from Clerk and Auth0 with PropelAuth's MCP Server

Most teams budget a week for auth and lose a month. That's the problem the PropelAuth Integration MCP server solves: it gives your AI agent the right context to add PropelAuth quickly, instead of guessing or working from stale docs. Starting fresh is one case. But what happens

Authentication and Authorization for Internal MCP Servers

Authentication and Authorization for Internal MCP Servers

Picture this: You’ve just built a brilliant Model Context Protocol (MCP) server. It’s the ultimate internal powerhouse, seamlessly bridging your organization’s LLMs with your most sensitive private repositories, production databases, and internal APIs. It feels like magic. And then someone asks: "Wait - can every employee just…

Introducing Developer and Customer Management Roles

Introducing Developer and Customer Management Roles

We've added two new roles to the PropelAuth dashboard: Developer and Customer Management. The idea behind both is the same: give people access to everything they need for their job, without access to anything extra. In practice, the person setting up your login methods and the person helping

6 Best Authentication Platforms for B2B SaaS in 2026

6 Best Authentication Platforms for B2B SaaS in 2026

Choosing an authentication platform for a B2B SaaS product is a decision you live with for years. The wrong choice shows up later as custom middleware for multi-tenancy, enterprise deals stalled on a missing SCIM checkbox, or a painful migration once per-user pricing catches up with your growth.

SCIM Provisioning: What It Is and When You Need It

SCIM Provisioning: What It Is and When You Need It

What Is SCIM? SCIM stands for System for Cross-domain Identity Management. It's an open standard (RFC 7643/7644) that automates user provisioning and deprovisioning between an identity provider (IdP), like Okta, Microsoft Entra ID, or JumpCloud, and third-party applications like yours. In plain terms: SCIM is

Scoped Backend API Keys in PropelAuth

Scoped Backend API Keys in PropelAuth

PropelAuth backend API keys now support granular permission scopes, giving you precise control over exactly what each key is authorized to do within your environment. Instead of issuing one all-powerful credential to every service that needs to talk to PropelAuth, you can now create narrowly scoped keys that carry

MCP Organization Scopes in PropelAuth

MCP Organization Scopes in PropelAuth

As MCP (Model Context Protocol) becomes the standard way users connect AI assistants like Claude and ChatGPT to SaaS products, one question is becoming impossible to ignore: how do you control what those AI agents are actually allowed to do on your MCP server? PropelAuth has added two significant upgrades

How Anglera Uses PropelAuth to Win Fortune 500 Customers

How Anglera Uses PropelAuth to Win Fortune 500 Customers

Anglera is AI-powered product data infrastructure for enterprise retailers and distributors. The platform automates the enrichment, standardization, and optimization of product data at scale, helping companies ensure their catalogs are complete, accurate, and ready for both traditional search and AI-powered product discovery. Backed by Y Combinator (S24), Anglera

6 Auth Platforms With Enterprise SSO Support for B2B SaaS in 2026

6 Auth Platforms With Enterprise SSO Support for B2B SaaS in 2026

Enterprise SSO is one of those features that can quietly stall a deal that seemed almost closed. Your product is solid, the champion is on board, and then someone from IT asks whether you support Enterprise Single Sign-On. If you don't have a good answer, the conversation

4 Auth Companies With SCIM Support in 2026

4 Auth Companies With SCIM Support in 2026

If you're building a B2B SaaS product, chances are your enterprise prospects are already asking about SCIM provisioning. It's one of those checklist items that shows up late in a sales cycle and can quietly kill deals. "Does your platform support automated provisioning?" If

6 Best Auth Platforms for Python Developers in 2026 (FastAPI, Flask, and Django)

6 Best Auth Platforms for Python Developers in 2026 (FastAPI, Flask, and Django)

Choosing a Python authentication platform is one of those decisions that's easy to get wrong and painful to undo. Whether you're building a FastAPI backend, a Django web app, or a Flask API, the auth library you reach for will shape how quickly you can ship,

PropelAuth HubSpot Integration: Sync Your Users to Your CRM Automatically

PropelAuth HubSpot Integration: Sync Your Users to Your CRM Automatically

Your auth layer and your CRM have always held different pieces of the customer puzzle. Assembling them meant custom webhooks, manual exports, or just living with the gap. The PropelAuth HubSpot integration Beta closes that gap: when a user signs up or logs in, that activity flows into HubSpot automatically.

5 Best Auth Platforms for React Developers in 2026 (Vite, Next.js, and React Router)

5 Best Auth Platforms for React Developers in 2026 (Vite, Next.js, and React Router)

Picking the wrong React authentication library is the kind of decision that feels fine at first and painful eighteen months later. By then you are either missing a feature that requires migrating providers, or your auth logic has spread across enough custom middleware that changing anything is a project. Whether

A Type-Safe Stack for Building B2B Apps Fast

A Type-Safe Stack for Building B2B Apps Fast

Picking a tech stack is an important decision for any product. There’s a lot of constraints that you need to balance. On the one hand, you want to get your product out into the world as quickly as possible. You want to see what works, what doesn’t work,