Groups

A Group in MCP Gateway control plane features maps directly to a group in your IdP. Admins assign groups to profiles, and every member inherits access to that profile's MCP servers. When someone joins or leaves the group in your IdP, their MCP Gateway access updates automatically. This lets admins govern MCP access by team or role instead of configuring access for each user.

Using groups helps onboard and offboard team members seamlessly with direct integration with the organization's IdP.

The access chain is: user → Group → Profile → MCP Gateway

Supported IdPs

Groups sync from IdPs, such as Okta, Microsoft Entra, Google Workspace, and any OIDC-compatible provider.