ChatGPT
Okta (demo) OpenAI · Assistant · app name matches /^chatgpt/
Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
38
Medium
People
10
Assigned, signed in, or granted
Sign-ins
60
10 active · 30 days
Assigned
10
Managed in the identity provider
identityoktaadmin-managedcorroborated
Next steps
Recommended actions
- 01ChatGPT trains on data unless a business tier or opt-out is used. Verify which tier these users are on.
- 02ChatGPT is assigned through Okta, so it already has an owner. Confirm the assignment group is deliberate and mark the app sanctioned here if it is.
- 03Adoption is broad enough that outright blocking will disrupt work. Prefer a sanctioned alternative plus Conditional Access.
Okta (demo) · okta
Through the identity provider
08-1609-14
Apps
ChatGPT Enterprise
Assigned10
Sign-ins60 by 10 people
Assigned by an administrator; no user-granted scopes.
Same app, other lanes
Related findings
- Critical85ChatGPTEntra consentall users
- High51ChatGPTNetwork11 people
- Medium48ChatGPTEndpoint2 people
- High58ChatGPTEmail4 people
- High60ChatGPT via Power PlatformAzure & Power Platform3 people
- High70ChatGPT: sensitive dataPurview DLP3 people
- High66ChatGPTSIEM · Splunk (demo)3 people
- Critical81ChatGPTCode · GitHub (demo)0 people
- Medium30ChatGPTGoogle Workspace (demo)5 people
Who
People
Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.
| Person | Department | Source | Sign-ins · 30 d | Granted |
|---|---|---|---|---|
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant | |
| n/a | Identity provider | 0 | No direct grant |
Why
Evidence
- idp_app · Sep 14, 2026Okta (demo): ChatGPT, 10 assigned, 60 sign-ins by 10 in 30 days
Detail
{ "appIds": [ "0oa1chatgpt" ], "scopes": [], "revoked": 0, "assignedUsers": 10 } - corroborationAlso found by another lane (consent:aaaa0002-0000-4000-8000-000000000002)
Detail
{ "findingKey": "consent:aaaa0002-0000-4000-8000-000000000002" } - corroborationAlso found by another lane (mdca:11114)
Detail
{ "findingKey": "mdca:11114" } - corroborationAlso found by another lane (mde:openai-chatgpt)
Detail
{ "findingKey": "mde:openai-chatgpt" } - corroborationAlso found by another lane (mail:openai-chatgpt)
Detail
{ "findingKey": "mail:openai-chatgpt" } - corroborationAlso found by another lane (pp:shared_openai)
Detail
{ "findingKey": "pp:shared_openai" } - corroborationAlso found by another lane (dlp:openai-chatgpt)
Detail
{ "findingKey": "dlp:openai-chatgpt" } - corroborationAlso found by another lane (siem:P3xsUoa63aFWUE_YRNuUJ:openai-chatgpt)
Detail
{ "findingKey": "siem:P3xsUoa63aFWUE_YRNuUJ:openai-chatgpt" } - corroborationAlso found by another lane (repo:giypXj7r_Gc5tatesErdR:openai-chatgpt)
Detail
{ "findingKey": "repo:giypXj7r_Gc5tatesErdR:openai-chatgpt" }