Connectors tab overview

  • Updated

The Connectors tab lets you authorize your personal third-party accounts with Optimizely Opal. Opal administrators control which connectors and remote Model Context Protocols (MCPs) are available to the organization. Individual users then authenticate their personal accounts. Opal acts on their behalf using their permissions, data access, and identity.

To access the Connectors tab, click Connectors.

Screenshot of the Connectors tab where connector tiles are displayed for user authentication

For Opal administrators

Opal administrators manage connector and remote MCP availability for the entire organization. The following connector types are available:

  • OCP connector tools – Apps installed to Opal through the Optimizely Connect Platform (OCP) App Directory. See OCP connector tools.
  • Remote MCPs – External servers that communicate with Opal through MCP. See Remote MCPs.

Both types display as tiles on the Connectors tab. After an administrator connects them, users can then connect to authenticate with the third-party provider.

OCP connector tools

Some connector tools require installation in OCP before users can authenticate with them. This is a one-time configuration per connector.

After installation, the connector tile displays on the Connectors tab for users to authenticate with their personal accounts.

As an Opal administrator, install any of the following connector tools in OCP for your organization:

To remove a connector tool, see Delete a tool registry. Removing a connector tool disables it for the entire organization. Users who have already authenticated with the tool lose access immediately, and the connector tile no longer displays on the Connectors tab.

Remote MCPs

Remote MCPs extend Opal's capabilities by connecting to external MCP servers that Optimizely has approved. Opal administrators connect to the remote MCP and then users can authenticate to view their own information.

As an Opal administrator, connect any of the following remote MCPs to make them available to your organization:

See Add a remote MCP provider for instructions. Connecting a remote MCP server extends Opal with tools and data from an external system.

Administrator visibility into user connections

Opal administrators cannot view which users in their organization have authenticated a connector. Individual connections are private to each user.

For Opal users

Use the Connectors tab to link your personal third-party accounts to Opal. This ensures Opal uses your identity and permissions when calling connector tools, rather than a shared account.

Benefits of personal authentication

Authenticating your personal accounts provides the following advantages:

  • Personal data access – Opal retrieves information from your calendar, files, or projects.
  • Action attribution – Opal performs actions in other systems on your behalf.
  • Granular security – Opal never shares your personal information with other users in your organization.

Prerequisites

Before connecting to a third-party tool, ensure you meet the following requirements:

  • Have an active account with the third-party service.
  • Have an Opal administrator enable the connector in OCP or add the remote MCP for your organization.
  • Allow pop-up windows in your browser.

Authenticate a connector

Authentication opens a pop-up window where you log in to the third-party service and grant Opal permission to access your account. This process uses OAuth, the standard authorization protocol for connecting to third-party services securely. The steps vary by connector.

After an administrator adds a connector, follow the steps for your connector to authenticate your personal account:

Manage your connections

Manage your connections from the Connectors tab. Use the Active Status filter to display only connected items.

  • Refresh connection – Re-authenticate if a session expires or if the third-party service requires a password update.

  • Disconnect – Remove Opal's access to your personal account by revoking the stored authentication token. Disconnecting does not delete any data that Opal retrieved from the third-party service.

    Screenshot of the Connectors tab where the Disconnect option is shown on a connected connector tile

    To reconnect, click Connect.

Troubleshoot

If you encounter issues when authenticating or managing a connector, see the following common scenarios and resolutions.

Pop-up window does not display

Opal opens a pop-up window to complete the authentication flow. If the window does not display after you click Connect, your browser may be blocking pop-ups.

Resolution – Check your browser's address bar for a blocked pop-up notification and click Allow. Then click Connect again.

Authentication window closes

If the window closes before you finish logging in or granting permissions, the connection does not complete and the connector status remains unchanged.

Resolution – Click Connect again and complete the steps in the Authenticate a connector section without closing the pop-up window manually. Ensure you click Allow or Authorize on the permissions page before you close the window.

Status does not update to connected

After you complete the authentication steps, the connector status may not immediately display as Connected.

Resolution – Refresh the Connectors tab and check the status again. If the status still does not update, disconnect the connector and repeat the authentication steps.

Connection displays as expired or requires re-authentication

OAuth tokens expire after a period of inactivity, a password change, or a revoked permission. When this happens, Opal can no longer act on your behalf until you re-authenticate.

Resolution – Locate the affected connector on the Connectors tab and click Refresh. Complete the login and permissions steps again to restore the connection.

Connector not visible in the list

The Connectors tab displays connectors Optimizely has added. If a connector you expect to see is not listed, an Opal administrator may not have enabled it yet.

Resolution – Contact your Opal administrator and request that they enable the connector.

Connection displays an error after authentication

An error state after completing authentication typically indicates a permissions mismatch, an unsupported account type, or an issue on the third-party service's end.

Resolution – Disconnect the connector, then reconnect and ensure you grant all requested permissions during the authorization step. If the error persists, verify that your third-party account has the required access level. For connector-specific guidance, see Authenticate a connector.

Related topics

See the following documentation:

If you use Opti ID, administrators can turn off generative AI in the Opti ID Admin Center. See Turn generative AI off across Optimizely applications.