Companies Can Manage App Access Through Work Accounts

Vercel Connect has added Enterprise-Managed Authorization, or EMA, in public beta. EMA lets a company manage an app's access to other services. Public beta means the feature is available for people to try. Apps and AI tools can act for users who have signed in. They can use supported services without a separate permission question for each. The company manages that access through its work account system.

Users first sign into the app with their company account. The account service must work with this new way of connecting. Okta is one example named in the announcement about the feature. People who manage company accounts can allow access through the system. They can also remove access there when it is no longer allowed. The user does not manage a separate approval for every supported service.

This approach does not give an app unlimited access to everything. The app asks only for the actions it needs to perform. Access stays within the actions that the company has approved. It also depends on what the user can already do. An app cannot gain wider rights simply because someone has signed in. These limits remain part of how the services connect to each other.

Vercel Connect handles the codes that apps use to request access. It exchanges, stores, and renews those codes for the app. An app using Vercel Passport can request access to Slack in this way. It uses the identity of the person who has signed in. Teams must set up the account system and supported services first. They also need to turn on EMA for the relevant connections.