Waxyaabaha loo baahan yahay

Si aad u dejiso SSO, waa inaad:

1. Haysataa qorshe OpenAI ah oo leh Global Admin Console

2. Noqotaa Global Admin

Kahor intaadan sii wadin, fadlan eeg bogaggayaga dukumeentiga ee Dulmarka SSO iyo Maamulka Isticmaalaha si aad u hubiso inaad taqaan qaab-dhismeedka SSO-keenna.

Haddii aad hore ugu dejisay SSO urur API Platform ah ama goobta shaqada ChatGPT, dejimahaaga SSO waa inay hore uga muuqdaan bogga OpenAI Identity. Haddii goobta shaqada ama ururka aad rabto inaad SSO uga hawlgeliso uusan ka muuqan Global Admin Console-kaaga, fadlan la xiriir support@openai.com.

Tijaabinta SSO

Haddii aad rabto inaad tijaabiso habka dejinta adigoon khatar gelin saamayn ku timaadda isticmaalayaashaada, waxaad taas ku samayn kartaa application-ka halkan.

Dhammaystirka xiriir guul leh ee application-kan tijaabada ah kuma xirmi doono org-gaaga wax-soo-saarka, sidoo kalena ma keydin doono xiriirka (sidaas darteed waxaad dib ugu isticmaali kartaa isla xuduudaha instance-kaaga wax-soo-saarka markaad diyaar noqoto). Tani waxay ka dhigan tahay inay ammaan tahay in loo isticmaalo sandbox ama meel tijaabo ah inta aad la qabsanayso shuruudaha oo aad ka shaqaynayso waxyaabaha hore uga dhiman.

Hawlgelinta SSO

Si aad u bilowdo, ka tag bogga OpenAI Identity adigoo ka maraya Global Admin Console. Waxa kale oo aad boggaas ka gaadhi kartaa link-ga ku yaal bogga "Identity & Provisioning" ee hoos yimaada dejimahaaga "Manage Workspace" ee ChatGPT ama tab-ka Identity ee dejimaha ururkaaga API Platform.

Qaar ka mid ah tusaalooyinka hoose waxay muujin doonaan dejinta Okta, laakiin isla macquulkaas waa inuu ku habboonaadaa dhammaan SAML IdP-yada.

Xaqiijinta Domain-ka

Si loo hawlgeliyo SSO, waxaan kaa rabnaa inaad marka hore xaqiijiso ugu yaraan hal domain.

Guji badhanka "+ Add Domain" oo geli DNS-kaaga si aad u bilowdo:

Marka aad gudbiso, waxaan ku siinaynaa fure aad ku xaqiijiso lahaanshaha domain-kaaga. Tag adeeg-bixiyahaaga DNS, kadibna ku dar diiwaan TXT ah qiimaha laguu siiyay:

Diiwaankaaga TXT waa inuu lagu gaari karaa DNS lookup si hubinta xaqiijintu u guulaysato.

Kadib markaad tan ku dhamaystirto adeeg-bixiyahaaga DNS, ku noqo bogga dejinta oo guji badhanka "Check". Haddii lahaanshaha domain-kaaga si guul leh loo ansixiyo, waxaad arki doontaa heerka oo isu beddelay "Verified."

Waxaad ku dari kartaa ilaa 99 domain oo la xaqiijiyay halkii Admin Portal, waxaana ku siinaynaa muddo 7 maalmood ah si aad u dhamaystirto hubinta xaqiijinta ka hor inta domain-ka lagu calaamadin inuu dhacay. Domain-yada waxa lagu xaqiijin karaa hal Admin Portal oo keliya. Haddii aad u baahan tahay inaad isla domain-ka ku xaqiijiso urur ama goob shaqo oo aan ku jirin Admin Portal-kaaga, fadlan la xiriir Support.

Dejinta Application-kaaga

Markaad si guul leh u xaqiijiso domain-kaaga, waxaad sii wadi kartaa dejinta SSO adigoo habeeynaya application-kaaga IdP.

Si aad u bilowdo, guji badhanka "Set up SSO":

Doorashada adeeg-bixiyahaaga aqoonsiga

Waxaad dooran kartaa liiska IdP-yada ugu caansan ee si toos ah u taageera isdhexgalka SAML. Haddii aadan ku arkin IdP-gaaga liiska, ama haddii aad rabto inaad isticmaasho xiriir OIDC ah, waxaad dooran kartaa badhanka Custom connection ee ku habboon ee ka muuqda hoose:

Abuurista/ku xidhista Application-ka

Hadda waxaad raaci kartaa wizard-ka dejinta ee tallaabo-tallaabada ah si uu kaaga caawiyo abuurista iyo ku xidhista application-kaaga IdP annaga. Iyadoo ku xiran IdP-ga aad isticmaalayso, tilmaamahaagu wax yar way kala duwanaan karaan, laakiin dejinta guud waa isku mid:

Ogow in URL-yada lagu bixiyo tallaabada abuuristu ay u gaar noqon doonaan ururkaaga:

Markaad dhamaystirto dejinta URL-ka, waxaad sii wadi kartaa qeexidda attribute mapping-ka isticmaalayaasha lagu xaqiijiyo application-kaaga.

Attribute Mapping

Attribute mapping-ka aad ku qeexdo application-kaaga SSO ayaa ugu dambayn go'aamiya akoonnada OpenAI ee la xaqiijinayo iyo sida isticmaalayaashaadu uga muuqanayaan badeecooyinka OpenAI. noockeena isticmaalaha ee hadda jira wuxuu taageeraa saddex sifo:

1. Cinwaanka iimaylka (waa qasab jawaabta SAML, wuxuuna go'aamiyaa akoonka la galayo)

2. Magaca koowaad (ikhtiyaari, laakiin waa lagu talinayaa)

3. Magaca dambe (ikhtiyaari, laakiin waa lagu talinayaa)

Iyada oo ku xiran IdP-gaaga, attribute mapping-ka saxda ahi wuu kala duwanaan doonaa. Waxaan kugula talinaynaa inaad raacdo mapping-ka saxda ah ee loogu muujiyey IdP-gaaga gudaha wizard-ka dejinta, tusaale ahaan Okta waxay ahaan lahayd:

Haddii aad aragto isticmaalayaal cusub oo soo galaya iyadoo cinwaankooda iimaylka loo dejiyey magaca bandhigga, fadlan eeg attribute mapping-kaaga oo xaqiiji inaadan sirgelin jawaabahaaga.

Sidoo kale, haddii isticmaalayaasha cusub la weydiiyo inay geliyaan magacooda iyo taariikhda dhalashada, tani waxay u badan tahay inay muujinayso inaanan ka aqoonsanayn qiime magac oo sax ah jawaabtaada attribute-ka.

Isbeddellada iimaylka

Marmar, cinwaanka iimaylka isticmaale ayaa laga yaabaa in lagu cusboonaysiiyo IdP-gaaga, tusaale ahaan.

• Isbeddel magac sharci ah kadib guur

• Shirkaddoodii waa la iibsaday waxayna heleen domain cusub

• iwm.

Haddii tani beddesho qiimaha emailaddress claim ee ku jira SSO SAMLResponse, isticmaale OpenAI oo kale oo ku xiran cinwaanka iimaylka cusub ayaa la geli doonaa (lana abuuri doonaa haddii uusan hore u jirin) marka SSO si guul leh u dhaco. Isticmaalahan wuxuu u baahan doonaa in si gooni ah loogu casuumo Org ama Workspace marka loo eego isticmaalihii asalka ahaa.

Cinwaannada iimaylka koowaad

Xaaladaha qaarkood, waxaad yeelan kartaa isticmaalayaal leh cinwaanno iimayl oo kala duwan oo badan. Tani waa xaalad caadi ka ah shirkadaha waaweyn ee leh nidaamyo boosto oo kala firdhisan ama macaamiisha Edu ee leh dugsiyo kala duwan, tusaale ahaan.

• user_a@main_school.edu

• user_a@business_main_school.edu

Xaaladdan, waxaan kugula talinaynaa inaad hubiso in jawaabtaada SAML ay ku jirto hal cinwaan iimayl oo keliya oo ku jira attributes-keeda, maadaama ku darista iimayllo badan ay keeni karto jahawareer marka aan isku dayno inaan ku xidhno isticmaale cusub ama mid jira.

Intaa waxaa dheer, haddii isticmaalayaashu leeyihiin cinwaan iimayl oo joogto ah (tusaale ahaan UPN), waxaan kugula talinaynaa inaad tan ku isticmaasho attribute mapping-kaaga si loo hubiyo inay yeelan doonaan akoon isticmaale OpenAI oo deggan oo aan saameyn yeelan doonin marka cinwaannadooda kale ee iimaylka la beddelo.

Sii helitaanka application-ka IdP

Markaad si guul leh u abuurto attribute mapping-kaaga, wizard-ku wuxuu ku marin doonaa tallaabooyinka lagu siinayo helitaanka isticmaalayaasha ku habboon iyadoo loo marayo kooxaha la doonayo.

Fadlan eeg talooyinkayaga ku saabsan Maamulka Isticmaalaha si aad u raacdo hab-raacyada ugu fiican.

Dejinta metadata-ga IdP

Marxaladdan dejinta, waxaad haysataa laba doorasho oo kala duwan oo aad ku qeexi karto metadata-ga IdP-gaaga: Dynamic Configuration iyo Manual Configuration.

Dynamic Configuration

Tani waa doorashada lagu talinayo uguna tooska badan. Dynamic Configuration, waxaad si fudud u baahan tahay inaad bixiso Metadata URL (oo hadda ay buuxiyeen SSO URL iyo Entity ID aad hore u dejisay) ee la xiriira application-kaaga. Wizard-ka dejintu wuxuu ku tusi doonaa halka aad tan kaga heli karto IdP-gaaga:

Manual Configuration

Sida magacu tilmaamayo, Manual Configuration waxay u baahan tahay shaqo yar oo dheeraad ah. Iyada oo ku xiran IdP-gaaga, waxaad u baahan doontaa inaad geliso SSO URL-ka u dhigma iyo IdP issuer, oo ay la socoto shahaado x.509 ah:

Gelitaanka uu IdP bilaabo

Haddii aad rabto in isticmaalayaashu awoodaan inay gujiyaan tile ku yaal dashboard-kooda oo si toos ah loo xaqiijiyo, waxaad dejin kartaa auth uu IdP bilaabo oo ku socda application-kaaga qayb ka ah habka dejinta. Inkastoo habka saxda ahi uu ku xirnaan doono IdP-gaaga, habka guud wuxuu adeegsan doonaa URL la bixiyay oo qaabkan ah:

• ChatGPT: https://chatgpt.com/auth/login?sso=true&connection=conn_0123abc

• API Platform: https://platform.openai.com/enterprise/conn_01ABC02DEF/login

Tusaale ahaan, Okta waxay ku marin doontaa abuurista Bookmark Application cusub oo leh URL-kan:

Halka Entra ID ay kuu oggolaanayso inaad geliso "Sign on URL" la bixiyay foomka ku habboon:

Dhamaystirka dejinta

Markaad dejiso metadata-ga IdP-gaaga, waxaad gujin kartaa "Continue" si aad ugu sii gudubto dejinta bookmark apps kasta oo ikhtiyaari ah. Tallaabada ugu dambaysa ee qasab ah waxay ku jiri doontaa bogga "Test Single Sign-On":

Ka dib markaad gujiso "Continue to sign-in," wizard-ku wuxuu isku dayi doonaa inuu tijaabiyo xiriirkaaga cusub. Haddii wax walba guulaystaan, waxaad si dhab ah u hawlgelisay SSO. Hadda waa inaad tan ku aragtaa boggaaga dejinta:

Isticmaalayaasha ku jira kooxdaada IdP ee leh akoonno ama casuumado u dhigma waa inay hadda awoodaan inay ku galaan SSO:

• Waxay tagi karaan chatgpt.com ama platform.openai.com, geliyaan iimaylkooda, dabadeedna ay xaqiijiyaan ka dib marka aan u gudbinno IdP-gooda

• Waxay isticmaali karaan Bookmark Tile URL-ka aad (ikhtiyaari ahaan) dejisay intii lagu jiray dejinta

Haddii aad ogaato in isticmaalayaashaadu aysan si guul leh isu xaqiijin karin, oo ay kugu adkaato inaad dib uga noqoto isbeddellada, fadlan la xiriir Support si degdeg ah laguu caawiyo.

Xusuusnow in hawlgelinta SSO ee API Platform ay ku dabaqayso xaqiijinta domain-ka dhammaan isticmaalayaasha leh domain-kaas. Tani waxay ka dhigan tahay in, xitaa haddii isticmaalayaashu aysan ka tirsanayn ururkaaga Enterprise, haddana looga baahan doono inay ka mid noqdaan kooxdaada IdP si ay u galaan ururradooda gaarka ah.

Xallinta dhibaatooyinka gelitaanka

Haddii aad la kulanto dhibaatooyin gelitaanka kadib markaad hawlgeliso SSO, waxaad eegi kartaa boggayaga FAQ iyo Xallinta Dhibaatooyinka si laguu caawiyo inaad aqoonsato khaladaadka caamka ah. Haddii aadan halkaas ka helin jawaab ku filan, fadlan ha ka waaban inaad la xiriirto Support.