Skip to content

Integrating SailPoint with OpenAI SaaS

This guide describes how to connect SailPoint to OpenAI so you can run test connection, account and entitlement aggregation, provisioning, and dataset aggregation for governance-relevant objects - for example organization users, roles and groups, API keys, and certificates as machine identities.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

Feature Description
Test Connection Validates access to the OpenAI Administration API with the configured admin API key.
Account Aggregation Aggregates OpenAI organization users, project memberships, and assigned entitlements.
Entitlement Aggregation Aggregates organization roles, project roles, and groups that can be assigned to users.
Provisioning Supports entitlement assignment and removal of organization roles, project roles, and groups. The connector also supports account delete (remove user from the organization).
Dataset Aggregation Aggregates OpenAI API keys and certificates as machine identities.

Non-Human Identity Discovery

  • Aggregate OpenAI API keys and certificates

Refer to Dataset Management for more information.

Refer to Discovering Potential Non-Human Accounts for more information.

Prerequisites

Before you configure the source, create an OpenAI admin API key with the permissions required to aggregate users, entitlements, API keys, and certificates and to provision access. SailPoint recommends using a dedicated service account or administrator identity approved by your organization.

Create an OpenAI Admin API Key

SailPoint authenticates to OpenAI using an Admin API Key configured on the source (the key is stored as a secret).

  1. Sign in to the OpenAI Platform with an account your organization approves for integration (a dedicated service account or admin identity is recommended).
  2. Open your organization settings and create an Admin API Key with the read and write permissions your governance program requires.
  3. Copy the key immediately and store it in your secrets tooling. You will paste it into SailPoint as Admin API Key. Once you close the key window, the secret value is not shown again.
  4. Grant only the access required for the operations you enable: user and entitlement aggregation, provisioning, and dataset collection (API keys, certificates).

For information about creating and managing API keys, refer to OpenAI API Authentication.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.