Definition
OpenID Connect (OIDC) is an identity layer on OAuth 2.0 used for authentication and issuer discovery; MCP 2026-07-28 hardens client alignment with OIDC/OAuth deployments including iss validation and application_type declaration.
Key Points
- RFC 9207 iss parameter validation mitigates mix-up attacks in multi-server MCP patterns
- Enterprise-Managed Authorization (EMA) extension targets central IdP provisioning of MCP servers
- Closely tied to oauth evolution in agent-tool protocols