Please support interactive OAuth authentication for the OpenAI Administration API, analogous to aws sso login.
My use case is running Terraform/Pulumi as a human administrator to provision projects, service accounts, and workload identity federation issuer/mapping configuration without creating a persistent Admin API key.
Desired workflow (proposed commands):
openai login --org <organization>
# Browser authentication; device authorization available for remote terminals
terraform apply
# Or: pulumi up
Requested capabilities:
-
Short-lived Admin API access tokens scoped to the authenticated user’s organization permissions.
-
Browser authorization with PKCE and a device authorization option.
-
A documented credential helper/cache consumed by the CLI, SDKs, and IaC providers, with automatic refresh.
-
Organization/profile selection, logout/revocation, and enforcement of SSO/MFA and session policies.
-
API and IaC support for provisioning WIF issuers and service-account mappings using that human admin session.
The immediate goal is keyless human bootstrap of workload federation. Separately, narrowly scoped federated Admin API access would enable subsequent CI-driven infrastructure management without storing an Admin API key.
Is this planned, or is there an existing supported workflow or public issue to follow?
P.S. Anthropic already supports this as expected.