Skip to main content

Overview

To authenticate with the ChatGPT Enterprise SCIM API, you need:
  1. SCIM Endpoint - The SCIM base URL generated by the ChatGPT Enterprise setup wizard.
  2. SCIM Token - A bearer token generated alongside the endpoint.
This guide will walk you through generating both within ChatGPT Enterprise.

Prerequisites:

  • A ChatGPT Enterprise (or Edu) workspace.
  • SSO (SAML) already configured and active on the workspace — SCIM cannot be enabled without it.
  • The logged in user must be a workspace administrator.

Instructions:

Step 1: Generate your SCIM Endpoint and Token

  1. Log in to ChatGPT as a workspace administrator.
  2. Select your profile icon at the bottom-left in ChatGPT.
  3. In the menu, select Workspace settings > Identity & Provisioning.
  4. Scroll down to User Provisioning.
  5. Under Directory Sync (SCIM), select Create Directory Connection.
  6. Select Custom SCIM.
  7. Follow the wizard to generate the URL and token.
Copy the entire SCIM endpoint URL exactly as shown by the wizard, along with the token — ChatGPT will not show either again after this step. If you’ve already generated a SCIM token for another client (e.g. Okta, Entra ID), you can reuse the same URL and token here instead of generating new ones.

Step 2: Enter credentials in the Connect UI

Once you have your SCIM Endpoint and SCIM Token:
  1. Open the form where you need to authenticate with ChatGPT Enterprise.
  2. In the SCIM Endpoint field, enter the endpoint without the https:// prefix — the form adds it for you (e.g. api.workos.com/scim/v2.0/acme, not https://api.workos.com/scim/v2.0/acme).
  3. Enter your SCIM Token in the designated field.
  4. Submit the form, and you should be successfully authenticated.
You are now connected to ChatGPT Enterprise.