MCP Client Registration Against Entra ID: The OAuth Proxy Pattern
An OAuth proxy can connect MCP clients to an Entra-backed service while keeping downstream registration separate from upstream application provisioning. This conceptual walkthrough explains the two authorization transactions, per-client consent, token validation and refresh limits that make the proxy a security-critical authorization server.