AI Integrations (Anthropic and OpenAI)

Overview

Fencer integrates with Anthropic and OpenAI so you can see who has access to your AI provider accounts. By connecting these providers, you sync the members of your Anthropic and OpenAI organizations into Fencer’s identity management system as vendor identities.

Both integrations use Admin API keys to authenticate. Each Fencer organization can have one Anthropic connection and one OpenAI connection.

Note

These integrations only sync identities. Connecting them does not change how Fencer’s own AI features, such as AI fixes, work.

Prerequisites

• An active Fencer subscription.
• The Administrator role in Fencer.
• A plan that includes Identity Management, for the member sync to run.
• For Anthropic: an Anthropic organization account with admin access to generate Admin API keys from the Anthropic Console.
• For OpenAI: an OpenAI organization account with owner access to generate Admin API keys from the OpenAI Platform.

How it works

When you connect an Anthropic or OpenAI integration, Fencer validates the provided Admin API key by making a test request to the provider’s API. Once validated, Fencer stores the key securely using encrypted storage and creates the integration connection for your organization.

After the connection is established, Fencer syncs organization members from the AI provider into identity management as vendor identities, and syncs them again daily. This gives you visibility into who has access to your AI platforms alongside the rest of your organization’s identity posture.

Usage / Configuration

Connecting Anthropic

1. Go to Admin > Integrations.
2. Under Available Integrations, click the Anthropic card.
3. On the first step, review the getting started information, then click Continue.
4. Follow the instructions to generate an Admin API key:
   • Log in to the Anthropic Console at console.anthropic.com.
   • Navigate to Settings in the left sidebar.
   • Go to the Admin API Keys section.
   • Click Create Admin Key and give it a descriptive name (e.g., “Fencer Integration”).
   • Ensure the key has permission to list organization users.
   • Copy the generated key (it starts with sk-ant-admin-).
5. On the connection form, enter:
   • Name (optional): a friendly label for this connection. Defaults to “Anthropic” if left blank.
   • Admin API key: paste the key you generated.
6. Click Connect. Fencer validates the key and creates the connection. An identity sync is triggered automatically.

Connecting OpenAI

1. Go to Admin > Integrations.
2. Under Available Integrations, click the OpenAI card.
3. On the first step, review the getting started information, then click Continue.
4. Follow the instructions to generate an Admin API key:
   • Log in to your OpenAI account at platform.openai.com.
   • Navigate to Organization Settings.
   • Go to the Admin API Keys section.
   • Click Create new admin key and select Read Only as the key type.
   • Give the key a descriptive name (e.g., “Fencer Integration”).
   • Ensure the key has Organization Read permissions to allow reading organization member data.
   • Copy the generated key (it starts with sk-admin-).
5. On the connection form, enter:
   • Name (optional): a friendly label for this connection. Defaults to “OpenAI” if left blank.
   • Admin API key: paste the key you generated.
6. Click Connect. Fencer validates the key and creates the connection. An identity sync is triggered automatically.

Note

If you previously removed the connection, connecting again restores the existing record with the new key rather than creating a second connection.

Editing a connection

1. Go to Admin > Integrations and find your Anthropic or OpenAI connection under Active Integrations.
2. Click Edit.
3. Update the connection name or Admin API key as needed. Leave the API key field blank to keep the existing key.
4. Click Save changes.

Disconnecting an integration

1. Go to Admin > Integrations.
2. Click Remove on the Anthropic or OpenAI connection you want to remove, and confirm with Remove.
3. Fencer clears the stored API key and soft-deletes the connection. The associated vendor record is also removed.

Examples

Viewing synced identities from Anthropic

After connecting Anthropic, go to Posture > Identities. You will see Anthropic organization members listed as vendor identities with their email, display name, and Anthropic role (e.g., admin). These identities are correlated with identities from other connected platforms to provide a unified view of user access across your organization.

Viewing synced identities from OpenAI

After connecting OpenAI, go to Posture > Identities. OpenAI organization members appear as vendor identities with their email, display name, and role (mapped as owner or member). As with other identity integrations, these records contribute to your cross-platform identity posture.

Troubleshooting

• “Unable to connect to Anthropic. Please check your Admin API key.” — The API key may be invalid, expired, or lack the required permissions. Verify that the key starts with sk-ant-admin- and that it has permission to list organization users.
• “Unable to connect to OpenAI. Please check your Admin API key.” — The API key may be invalid, expired, or the key type may not have the necessary Organization Read permissions. Verify that the key starts with sk-admin- and was created with Read Only access.
• Integration shows unhealthy status — Edit the connection and provide a fresh Admin API key. Fencer validates the new key before saving it.
• No members synced — Ensure your Anthropic or OpenAI organization has at least one active member, that the Admin API key has sufficient permissions to list organization users, and that your plan includes Identity Management.

Related pages

• Integrations Overview
• Identity Management