{"versionId":"9b8aad10-ec4a-4fed-4249-08dee92af19c","articleId":"474516ba-47f7-4b7b-0eeb-08deec46615a","title":"Authentication configurations | Admin guide","tags":["connectors","MCP","System admin","All articles"],"content":"

This guide explains how system administrators can create and manage authentication configurations in Theta Assist.

\n

Use authentication configurations when a connector or MCP server needs to sign in to an external service such as Microsoft, Google, Dropbox, or another OAuth provider.

\n

See also:

\n\n
\n

Quick links

\n\n
\n

What authentication configurations are

\n

Authentication configurations store the connection details Theta Assist needs to authenticate with an external service.

\n

They are created once by an admin and then reused by connectors or MCP servers that need that provider.

\n

For example, you might create one Microsoft authentication configuration and use it for:

\n\n

When you need one

\n

You need an authentication configuration when a connector or MCP server requires sign-in or API access to another platform.

\n

This commonly applies to:

\n\n

If a connector or MCP server is public and does not require authentication, you may not need an authentication configuration.

\n

Before you start

\n

Before you create an authentication configuration, make sure:

\n\n

Create an authentication configuration

\n
    \n
  1. Go to Admin > Tools > Auth Configurations.
    2. \n
  2. Click + Add Auth.
    3. \n
  3. Enter a clear Configuration name, such as Microsoft 365 production.
    4. \n
  4. Select the Provider.
    5. \n
  5. Optionally add a Description.
    6. \n
  6. Enter the required authentication details for your chosen method.
    7. \n
  7. Click Save.
    8. \n
\n

After saving, you can attach the authentication configuration to a connector or MCP server that supports that provider.

\n

Authentication options

\n

Standard OAuth 2.0

\n

Use this for most common provider integrations.

\n

You will usually need:

\n\n

Discovery-based OAuth

\n

Some providers support OAuth discovery so Theta Assist can find the required endpoints automatically.

\n

For this option:

\n\n

Dynamic client registration

\n

Some providers support dynamic client registration.

\n

For this option:

\n\n

The system can then register and cache client credentials automatically where supported.

\n

Static API key

\n

Some services use a static API key instead of OAuth.

\n

For this option:

\n\n

Use this only when the service supports API key authentication.

\n

Provider-specific notes

\n

Microsoft

\n

Microsoft integrations usually require:

\n\n

If you already use Microsoft connectors, you may be able to reuse the same app registration and extend its permissions for broader MCP use.

\n

For Microsoft-specific setup detail, see M365 Tools MCP server | Admin guide.

\n

Google

\n

Google integrations usually require a Google Cloud OAuth client, the correct redirect settings, and the required scopes for the services you want to use.

\n

Dropbox

\n

Dropbox integrations usually require a Dropbox app, client credentials, and the correct scopes for file access.

\n

Other providers

\n

For other providers, use the values supplied by that service for OAuth or API key authentication.

\n

Security and management notes

\n\n

Troubleshooting

\n

The provider will not authenticate

\n

Check that:

\n\n

The configuration saves but does not work

\n

Check whether the connector or MCP server is using the correct authentication configuration.

\n

Also confirm that the provider and scopes match the tool you are trying to enable.

\n

Users are prompted unexpectedly

\n

This can happen when tokens expire, consent changes, or the configuration has been updated.

\n

Ask the user to authenticate again and confirm the provider settings are still valid.

\n

Related guides

\n\n

 

","description":"Set up and manage authentication configurations in Theta Assist for connectors, MCP servers, and external services.","isMarkdown":false,"publishedOnUtc":"2026-07-28T03:02:26.2976736","modifiedOnUtc":"2026-07-28T01:20:15.8047412"}