Integration · Developer tools

Connect Claude & ChatGPT to SSOJet

Ask your AI which organizations a user belongs to, what roles they hold, or who a customer's directory has synced, and get the answer from your SSOJet application. It can search and manage users and tenants, add users to tenants, list roles and their permissions, and read directory-sync users and groups. It can also invite people and assign roles, with your approval if you want it.

Connect SSOJet free

Free plan, no credit card. Takes about a minute.

Try asking

“Which tenants does [email protected] belong to, and what roles does she have?”
The AI finds the user by email, lists her tenants and reads her roles in each one.
“Create a tenant for Nordic Foods with the domain nordicfoods.dk.”
It creates the tenant with its name and email domain, ready for users to be added.
“Invite [email protected] to Nordic Foods as an admin.”
It finds the role ID, creates the invitation and can send the invitation email.

What your AI can do

Users

Search, create and update users, set them active or inactive, and see their tenants and roles.

Tenants and invitations

Create and update tenants with their domains, add users to tenants, and send, list and resend invitations.

Roles and directory sync

Read roles and their permissions, assign roles within a tenant, and list users and groups synced from a tenant's directory.

“Which invitations to the Acme tenant are still pending?”
It lists the tenant's invitations with status pending, and can resend one if you ask.
“Which users and groups has Acme's directory synced?”
It lists the tenant's directory-sync connections and the users and groups synced from the one you pick.
“Deactivate the user [email protected].”
It finds the user and sets them as inactive. Deleting a user instead is permanent.

57 tools for SSOJet

These tools are switched on when you connect. You can switch any of them off, or require your approval before it runs.

add_users_to_tenantChanges dataAdd existing users to a tenant by `tenantid`, passing their IDs in `user_ids`.
assign_tenant_rolesDeletesAssign roles to a user within a tenant, by `tenantid`, `userid` and `role_ids`. This changes what the user can access.
create_permissionDeletesCreate a new permission. Required: client id or name. Destructive action; may require approval.
create_roleDeletesCreate a new role. Required: client id or name. Destructive action; may require approval.
create_tenantChanges dataCreate a tenant (customer organization) with a `name` and its email `domains`, plus optional display name, external ID and metadata.
create_tenant_post_tenants_tenantid_admin_sessionDeletesCreate a new tenant for a tenant. Required: client id. Search tenants first to avoid duplicates. Destructive action; may require approval. API summary: Initialize New Admin Session.
create_userChanges dataCreate a new user with `email` and/or `phone`, `first_name`, `last_name` and optional metadata.
delete_roleDeletesPermanently delete a role by role id. Destructive action; may require approval. API summary: Delete an Existing Role.
delete_tenantDeletesPermanently delete a tenant by tenantid. Destructive action; may require approval. API summary: Permanently Delete Tenant.
delete_tenant_invitationsMoves moneyPermanently delete a invitation by tenantid. Financial or irreversible action; may require approval. API summary: Cancel or Delete Invitation.
delete_tenant_usersMoves moneyPermanently delete a user by tenantid. Financial or irreversible action; may require approval. API summary: Remove Users from Tenant.
delete_tenantsMoves moneyPermanently delete a tenant by tenantid. Financial or irreversible action; may require approval. API summary: Terminate Admin Portal Session.
delete_userDeletesPermanently delete a user by `userid`. This cannot be undone.
get_directory_groupGet one group for a directory by group id. API summary: Get Synchronized Group Details.
get_directory_userGet one user for a directory by user id. API summary: Get Synchronized User Details.
get_magic_linkGet one magic link. API summary: Verify Authentication Magic Link.
get_magic_link_statusGet the current status of a magic link. API summary: Verify Session Status and Retrieve Access Token.
get_permissionGet one permission by permission id. API summary: Retrieve a Permission by Permission ID.
get_roleGet one role by `role_id`, including its description and permissions.
get_tenantGet one tenant by `tenantid`, with its name, display name, domains and metadata.
get_tenant_directoryGet one directory for a tenant by directory id. API summary: Get Tenant Directory Details.
get_tenant_member_rolesGet the roles a user holds within one tenant, by `tenantid` and `userid`.
get_userGet one user by `userid`, with email, phone, name, status and metadata.
get_user_2Get one user by conectionid. Results are paginated. API summary: List Users by Connection.
invite_to_tenantChanges dataInvite someone to a tenant by `tenantid`: `invitee` email, `inviter`, `role_ids`, optional expiry. Sends an invitation email when `send_invitation_email` is true.
list_directory_groupsList the groups synced from a tenant's directory, by `tenantid` and `directory_id`.
list_directory_usersList the users synced from a tenant's directory, by `tenantid` and `directory_id`.
list_logsList logs. Optional filters: client id or event. API summary: Retrieve User Login Audit Logs.
list_permissionsList permissions. Optional filters: client id. Results are paginated. API summary: Retrieve All Permissions.
list_rolesList the roles defined for your application, with their IDs and names.
list_tenant_directoriesList the directory-sync connections (e.g. SCIM directories) set up for a tenant by `tenantid`.
list_tenant_invitationsList invitations for a tenant by `tenantid`, filtered by `status` (for example pending or accepted).
list_tenant_usersList the users who are members of a tenant by `tenantid`, with paging.
list_tenantsList tenants for a tenant. Optional filters: client id. API summary: Retrieve Current Admin Session Info.
list_user_mfa_methodsList users for a user. Optional filters: client id. API summary: List User MFA Methods.
list_user_organizationsList the tenants (customer organizations) a user belongs to, by `userid`.
list_user_rolesList the roles assigned to a user by `userid`.
list_user_tenant_membershipsList users for a user. Optional filters: client id. API summary: List User Tenant Memberships.
list_userinfosList userinfos. API summary: Retrieve OIDC User Profile Information.
list_usersList users. Optional filters: client id. Results are paginated. API summary: List Tenant Members with Assigned Roles.
resend_invitationVisible to othersResend a pending tenant invitation by `tenantid` and `invitation_id` (or `invitee`). This sends the invitation email again.
search_tenantsList or search tenants (customer organizations) by free text (`search`), with paging. Use to find a tenant's ID.
search_usersSearch users by `email` or free text (`search`), with paging. Use to find a user's ID.
send_email_otpVisible to othersSend a email otp. Has effects visible outside this system. API summary: Send Authentication Email OTP.
send_magic_linkVisible to othersSend a magic link. Has effects visible outside this system. API summary: Send Authentication Magic Link.
send_phone_otpVisible to othersSend a phone otp. Has effects visible outside this system. API summary: Send Authentication Phone OTP.
submit_email_otpVisible to othersResend a email otp. Has effects visible outside this system. API summary: Resend Authentication Email OTP.
submit_email_otp_verifyVisible to othersVerify a email otp. Has effects visible outside this system. API summary: Verify Authentication Email OTP.
submit_magic_linkVisible to othersResend a magic link. Has effects visible outside this system. API summary: Resend Authentication Magic Link.
submit_phone_otpVisible to othersResend a phone otp. Has effects visible outside this system. API summary: Resend Authentication Phone OTP.
submit_phone_otp_verifyVisible to othersVerify a phone otp. Has effects visible outside this system. API summary: Verify Authentication Phone OTP.
update_assignpermissionsMoves moneyUpdate an existing assignpermission. Financial or irreversible action; may require approval. API summary: Assign Permission to Role.
update_permissionDeletesUpdate an existing permission identified by permission id. Destructive action; may require approval.
update_roleDeletesUpdate an existing role identified by role id. Destructive action; may require approval.
update_tenantChanges dataUpdate a tenant by `tenantid`: name, display name, domains, external ID or metadata.
update_userChanges dataUpdate a user by `userid`: email, phone, name, active status (`is_active`) or metadata. Only the fields you pass change.
update_usersMoves moneyUpdate an existing user identified by userid. Financial or irreversible action; may require approval. API summary: Assign User Roles.

Set up in three steps

1
Pick the app
Create a free HeyMyApps account and choose SSOJet from the app list.
2
Paste your key
Paste the Client ID and Client secret of your SSOJet application, and enter its Client ID again as the Application Client ID. In the SSOJet dashboard open Applications, select your application, open the Advanced tab, enable Client Credentials under grant types and save. Then copy the application's Client ID and Client Secret.
3
Add the link to your AI
You get a personal MCP link. Add it to Claude, ChatGPT or Cursor:
1. Click your name, then Settings › Connectors › Add custom connector.
2. Paste your link as the Remote MCP server URL.
3. Switch it on from the + menu in a chat.

Questions

What can the AI do in SSOJet?

It can search and read users, tenants, tenant members, invitations, roles and directory-sync connections with their synced users and groups. It can create and update users and tenants, add users to tenants, assign roles within a tenant, and invite or re-invite people. It can also delete users if you switch that tool on.

Does the AI see my SSOJet credentials?

No. You paste your SSOJet client ID and secret into HeyMyApps once. They are encrypted at rest, never shown to the AI and never shown again after you save them. The AI only gets the results of the tools you have switched on.

Can I control what the AI is allowed to do?

Yes. You choose which tools are switched on, so you can start with lookups only. Assigning roles changes what a user can access, invitations send emails and deleting a user is permanent, and these can require your approval before they run. Every tool call is logged.

Does it work with ChatGPT?

Yes. In ChatGPT, open Settings › Apps & Connectors › Advanced, turn on Developer mode and add your HeyMyApps link. Developer mode needs a paid ChatGPT plan: Plus, Pro, Business or Enterprise. The same link also works in Claude (Settings › Connectors › Add custom connector), Cursor and other MCP clients.

What does it cost?

HeyMyApps has a free plan, and you do not need a credit card to start. Paid plans are billed per completed task. You also need your own SSOJet account.

Why do I need to enable Client Credentials?

HeyMyApps talks to SSOJet as a server, without anyone signing in. SSOJet allows that through the Client Credentials grant, which you turn on for your application under the Advanced tab. The same application's Client ID also tells SSOJet which application's users, tenants and roles the AI works with.