Securing MCP in the Enterprise: OAuth, Token Exchange, and Real-World CI/CD Integration

This talk shares a hands-on experience integrating the Model Context Protocol (MCP) into an enterprise CI/CD on-prem toolchain (SonarQube, Bitbucket, Jenkins, Backstage, OKD, YouTrack etc..) using a centralized identity provider (Keycloak).

At ELCA we built a remote MCP server (Quarkus) acting as a common layer between tools and agents, focusing on authentication and delegation flows rather than just connectivity. To enable end-to-end trust, we also developed extensions/plugins for Jenkins, Bitbucket, and SonarQube to validate and consume JWT Bearer tokens issued through these flows without the need of static API keys.

The session dives into practical usage of modern OAuth / OpenID Connect features in a multi-system environment: Client ID Metadata Documents (CIMD), token exchange (internal ↔ external), JWT bearer grants, and identity brokering. We’ll explain how agents securely access downstream services across trust boundaries.

Expect concrete architecture, protocol flows and lessons learned when bringing MCP into an existing platform without rewriting everything.