Evidence record / codex

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-codex-enterprise-authentication-gains-native-mcp-grants-and-windows-proxy-support

Enterprise authentication gains native MCP grants and Windows proxy support. Eligible accounts can use enterprise MCP grants and a dedicated sign-in flow, with confidential-client OAuth support. Windows can authenticate to Negotiate/NTLM proxies using the signed-in user. The managed configuration path requires the configured trusted server to match the server whose configuration was applied, failing rather than silently proceeding with a mismatch. The same release also enables the Bedrock setup wizard by default.

Channel: tagged-release. Half: both. Date: 2026-10-23.

Operator consequence: Trial the native sign-in and proxy flows before maintaining custom credential bridges. Verify account eligibility, server identity, applied managed requirements, and reconnect behavior with the deployment’s actual identity system. Fewer bespoke login steps can reduce setup attention, but successful sign-in is not proof that the intended organization policy was applied.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-codex-enterprise-authentication-gains-native-mcp-grants-and-windows-proxy-support

Profile citations

  • Codex / claim / enterprise-mcp-and-proxy-auth

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact