Single sign-on (SSO) setup for OpenAI products

Determine whether identity belongs to a standalone Business workspace, a shared tenant or an eligible API organization. The responsible administrator and configuration surface depend on that scope.

Confirm subscription eligibility, control of the organization’s domain and permission to configure its identity provider. Follow the product’s setup guide for domain verification and provider configuration.

Keep an authenticated administrator session available and test sign-in separately. Review recovery access before enforcing a policy. SSO controls authentication; it does not automatically grant workspace membership or a product role.