Ujeeddo
Hagahan waxaa loogu talagalay inuu Admins iyo Kooxaha IT-ga siiyo macluumaadka lagama maarmaanka ah ee ay tahay in la tixgeliyo ka hor inta aan SSO lagu dejin akoonnadaada ChatGPT ama Platform. SSO waxaa heli kara macaamiisha Business, Enterprise iyo Edu.
Qaab-dhismeedka asalka ah iyo eray-bixinta
SSO hadda waxaa lagu taageeraa xaqiijinta SAML labadaba ChatGPT iyo API Platform.
Goobta shaqada waxay tilmaamaysaa instance ka mid ah ChatGPT
Urur wuxuu tilmaamayaa instance ka mid ah API Platform
Bixiyaha Aqoonsiga (IdP) wuxuu tilmaamayaa adeegga aad u isticmaasho maareynta aqoonsiga dhijitaalka ah. Waxaan taageernaa isku-xirro loo maro dhammaan IdP-yada taageera SAML. Qaar ka mid ah IdP-yada ugu badan ee aan la xirirnay waxaa ka mid ah:
Okta
Azure Active Directory/Entra ID
Google Workspace
Duo
Liiska buuxa ee IdP-yada la taageero, fadlan tixraac Bogga Isku-xirrada ee WorkOS. Waxaan taageernaa dhammaan isku-xirrada dhinac saddexaad ee boggan ku yaal ee lagu xiri karo SAML ama OIDC midkood.
Hadda, goob kasta oo shaqo oo ChatGPT ah waxay leedahay urur Platform ah oo u dhigma kuna xiran. Tani waxay ka dhigan tahay in Organization ID (org-id) ee aad ka hesho bogga Platform "General" ee Enterprise uu la mid yahay Organization ID (org-id) ku xiran goobtaada shaqada Enterprise ChatGPT. Sidaas darteed, goobtaada shaqada iyo ururkaagu waxay wadaagaan lakabka xaqiijinta aqoonsiga:
Waxaa jira dhowr arrimood oo muhiim ah oo laga xuso qaab-dhismeedkan awgiis:
Hal Organization ID (org-id) keliya wuxuu taageeri karaa hal habayn IdP oo keliya.
Xaqiijinnada domain-ka iyo dejinnada SAML SSO waxaa wadaaga ChatGPT iyo API Platform.
SSO waa in si gooni ah looga hawlgeliyaa ChatGPT marka loo eego API Platform. Si kastaba, marka aad mid ka dejiso, “dejinta” kan kale badanaa waa kaliya inaad shiddo badhanka oo aad ku darto app bookmark ah IdP-gaaga haddii aad rabto.
Bilaabidda SSO
Ka hor inta aan SSO lagu dejin akoonkaaga, waxaa muhiim ah inaad marka hore fahanto fikrado muhiim ah oo ku saabsan shaqada SSO ee OpenAI.
Eray-bixinta guud ee aqoonsiga
Diyaarinta Marka OpenAI ay ka hadlayso diyaarinta marka laga hadlayo isticmaalayaasha, waxaan si gaar ah ula jeednaa diyaarinta casuumaadaha. Si toos ah uma taageerno diyaarinta abuurista akoonnada isticmaalayaasha. Casuumaadaha waxaa lagu diyaarin karaa:
SCIM (waxaa lagu taageeraa labadaba Isku-xirka ChatGPT SCIM iyo Isku-xirka API Platform SCIM)
Bogga "Members" ee ChatGPT ama API Platform
Abuurista Akoon Toos ah
API-ga Casuumaadaha
Diyaarinta casuumaaduhu waa tallaabo ka madax bannaan xaqiijinta aqoonsiga ee SSO sameeyo.
Xaqiijinta aqoonsiga – “Ma tahay qofka aad sheeganayso inaad tahay?”
Tusaale: IdP ayaa isticmaalaha u xaqiijiya adeeggeena si aan u ogaano inuu yahay qofka uu sheeganayo inuu yahay marka uu soo gelayo.
Oggolaansho – “Maxaa laguu oggol yahay inaad samayso ama aragto?”
Tusaale: Ka dib marka IdP-gaagu ku xaqiijiyo, waxaan go'aaminnaa goobta/goobaha shaqada ee ChatGPT ee aad xubin ka tahay.
Barashada Dejinnada SSO ee OpenAI
Xaqiijinta domain-ka Tani waa shardi hore oo loogu baahan yahay hawlgelinta SSO iyo Abuurista Akoon Toos ah. Si fudud, “Ma adigaa leh domain-kan?”
Marka lagu soo gelayo chatgpt.com ama platform.openai.com, domain la xaqiijiyey ayaa go'aamiya in isticmaalaha loo gudbiyo boggayaga eray-sirka ama IdP-giisa marka SSO sidoo kale la dejiyey
Marka domain lagu xaqiijiyo goobtaada shaqada, isticmaale kasta oo lagu casuumo goobta shaqada isagoo wata email ka yimid domain-kaas waxaa lagu weydiin doonaa inuu ku daro akoonkiisa shakhsiyeed marka xigta ee uu soo galo.
Xaqiijinta aqoonsiga ChatGPT waxay ku salaysan tahay domain IYO goob shaqo - marka domain la xaqiijiyo SSO-na laga hawlgeliyo goobta shaqada, kaliya isticmaalayaasha ku jira goobtaas shaqada ee wadaaga domain-ka ayaa loo marin doonaa SSO. Isticmaalayaasha wadaaga domain-ka balse AAN ka tirsanayn Goobta Shaqada (tusaale isticmaalayaasha akoonnada Free, Plus, Pro ama Team ee domain-kaaga) waxay sii wadi doonaan inay ku soo galaan email/eray-sir ama Social.
Xaqiijinta aqoonsiga Platform waxay ku salaysan tahay domain -- marka domain la xaqiijiyo, SSO-na la hawlgeliyo, dhammaan isticmaalayaasha Platform ee hoos yimaada domain-kaas waxay waayi doonaan awoodda ay ku soo geli karaan eray-sir. Faahfaahin dheeraad ah ka eeg "Xaqiijinta domain-ka ee ChatGPT marka la barbar dhigo API Platform" ee hoose.
Subdomain-nada waa in si gaar ah looga xaqiijiyaa domain-nada heerka sare
Si aan si guul leh ugu habaynno xaqiijinta domain-kaaga, rikoodhkaaga TXT waa inuu ka akhrismi karaa baaritaanka DNS.
(ChatGPT oo keliya) Abuurista Akoon Toos ah (AAC) Marka lagu hawlgeliyo goob shaqo oo ChatGPT ah, isticmaale cusub oo email-kiisu la mid yahay domain-ka/domain-nada la xaqiijiyey wuxuu si toos ah u heli doonaa casuumaad goobta shaqada Enterprise marka uu is-diiwaangeliyo. Kuma talinayno in AAC la hawlgeliyo haddii aad isticmaalayso SCIM.
(ChatGPT oo keliya) Oggolow Casuumaadaha Domain Dibadeed Dejintani waxay xakameysaa in isticmaalayaasha leh domain-nada aan la xaqiijin lagu casuumi karo goobta shaqada iyo in kale. Isticmaalayaasha ka socda domain-nada dibadeed lagama rabi doono inay ku soo galaan SSO, maadaama dejinnada SSO ay khuseeyaan oo keliya isticmaalayaasha ka tirsan domain-ka la xaqiijiyey.
Hawl geli SSO Dejintani waxay go'aamisaa in dejinnadaada SSO ee la habeeyey ay khuseeyaan goobta shaqada iyo/ama ururka iyo in kale.
Qasab ka dhig SSO
Marka la demiyo, dejintani waxay isticmaalayaasha leh domain la xaqiijiyey u oggolaanaysaa inay kala doortaan ku soo gelista SSO ama soo gelinta bulsho.
Global Admins waxay Enforce SSO uga dhigi karaan Required labadaba ChatGPT iyo API Platform si toos ah bogga Manage SSO ee Admin Console. Marka la hawlgeliyo, dejintani waxay ka dhigaysaa in isticmaalayaasha leh domain la xaqiijiyey ay goobta shaqada ama ururka SSO-ga leh ku soo geli karaan oo keliya SSO. Xaqiijinta eray-sir iyo bulsho mar dambe uma ansaxna goobta shaqada/ururka, balse weli waxaa lagu isticmaali karaa goobo shaqo/ururro kale oo domain-kooda aan la xaqiijin.
Xaqiijinta domain-ka ee ChatGPT marka la barbar dhigo API Platform
Sida hore loo sheegay, xaqiijinta domain-ka waxaa lagu dabaqaa ChatGPT iyo Platform-ka wadaaga ah. Si kastaba, waxaa jira farqi muhiim ah oo ku saabsan sida xaqiijinta domain-ku u saameyso soo gelista ChatGPT marka loo eego Platform-ka haddii SSO la hawlgeliyo:
SSO-ga API Platform waa mid gabi ahaanba ku salaysan domain. Tani waxay ka dhigan tahay in marka domain lagu xaqiijiyo urur kasta , SSO-na la hawlgeliyo, DHAMMAAN isticmaalayaasha leh domain-kaas ay waayi doonaan awoodda ay ku soo geli karaan eray-sir. Haddii aanay haysan hab xaqiijin bulsho ah, waxaa laga xannibi doonaa ururradooda kala duwan haddii aanay ka tirsanayn kooxda gelitaanka ee IdP.
Dhanka ChatGPT se, kaliya isticmaalayaasha ka tirsan goobta shaqada ee domain-ka lagu xaqiijiyey ayaa saameyn doonta. Isticmaalayaasha aan ku jirin kooxda gelitaanka ee IdP's weli waxay awoodi doonaan inay ku soo galaan goobaha shaqada iyagoo adeegsanaya hababka lagu sharxay qaybta xigta.
Waayo-aragnimada soo gelista ee isticmaalayaashaada
OpenAI waxay taageertaa saddex hab oo xaqiijinta aqoonsiga ah:
Magaca isticmaalaha + Eray-sir
Xaqiijinta bulsho ee Microsoft/Google/Apple
SSO
Maskaxda ku hay in hab-dhaqanku kala duwanaan doono iyadoo ku xiran inuu isticmaaluhu soo gelayo ChatGPT ama API Platform, in domain-kiisa la xaqiijiyey iyo in goobihiisa shaqada/ururradiisa ay qasbeen SSO.
Soo gelis uu bilaabay SP
Dhammaan isticmaalayaashu si toos ah ayay u geli karaan chatgpt.com ama platform.openai.com si ay u soo galaan. Marka la adeegsanayo ikhtiyaarkan, hababka kala duwan ee xaqiijinta aqoonsiga waxaa loo kicin karaa sida hoos ku cad:
Haddii isticmaaluhu ka tirsan yahay goobo shaqo oo badan, oo ay ku jirto mid SSO loogu hawlgeliyey domain-kiisa, waxaa lagu weydiin doonaa inuu doorto goobta shaqada ee uu ku soo gelayo.
Soo gelista ChatGPT ee uu bilaabay SP
Haddii aan ogaanno in email-ka la geliyey uu ka tirsan yahay goob shaqo oo domain-keeda la xaqiijiyey, isticmaalaha waxaan u gudbin doonaa IdP-giisa si loo xaqiijiyo. Haddii kale, isticmaalaha waxaa loo diri doonaa inuu ku soo galo isagoo gelinaya eray-sirkiisa.
Haddii isticmaaluhu ka tirsan yahay goobo shaqo oo badan, oo ay ku jirto ugu yaraan mid SSO loogu hawlgeliyey domain-kiisa, waxaa lagu weydiin doonaa inuu doorto habka uu ku soo gelayo:
Ogow: haddii "Enforce SSO" loo hawlgeliyey goob shaqo gaar ah, isticmaalayaasha leh domain-ka/domain-nada la xaqiijiyey waxay ku soo geli karaan oo keliya SSO. Xaqiijinta bulsho iyo eray-sir lama heli doono.
Soo gelista Platform ee uu bilaabay SP
Sida hore loo sheegay, marka isticmaale leh domain la xaqiijiyey uu email-kiisa ku geliyo bogga soo gelista Platform, had iyo jeer waxaa loo wareejin doonaa IdP-giisa si loo xaqiijiyo.
Taasi waa sababta ay muhiim u tahay inaad si fiican u fahanto ka hor inta aanad SSO u hawlgelin Platform. Haddii kale, aad bay u fududahay in si khalad ah loo xannibo isticmaalayaasha Platform ee akoonnada shakhsiyeed.
Soo gelis uu bilaabay IdP
Marka SSO laga dejinayo bogaggooda aqoonsiga, waxaad heli doontaa Tile URL gaar ah oo loo bixiyey labadaba ChatGPT iyo API Platform:
ChatGPT: https://chatgpt.com/auth/login?sso=true&connection=conn_012abcdef
Platform: https://platform.openai.com/enterprise/conn_012abc/login
Tile URL-yadan waxaa lagu dejin karaa IdP-gaaga si isticmaalayaashaadu ugu soo galaan/ugu xaqiijiyaan aqoonsigooda si toos ah hal gujin.
Tallaabooyinka xiga
Hadda oo aad si fiican u fahantay qaab-dhismeedkayaga, fadlan u gudub boggayaga "Fahanka Habaynta Maamulka Isticmaalayaasha ee Kugu Habboon" si aad u go'aamiso hirgelinta ugu habboon isticmaalkaaga. Intaas ka dib, waxaan ku tusi doonaa sida loogu dejiyo SSO iyo SCIM gudaha akoonkaaga.