The rapid adoption of OpenAI's tools such as ChatGPT introduced complex identity and access management (IAM) challenges. With a user base spanning enterprise customers and individuals, OpenAI needed to secure sensitive data and manage user permissions at scale. Learn how OpenAI tackled these challenges to create a secure, user-friendly CIAM framework that supports its continued growth and innovation.
Launched in November 2022, ChatGPT quickly emerged as one of the fastest-growing applications, reaching 1 million users in just five days and surpassing 100 million monthly active users by January 2023. By December 2024, OpenAI reported over 400 million weekly active users. That number has surged to 1.2 billion weekly active users. By managing identity and authentication for OpenAI at this scale (~17% of the global population), Ory proves its infrastructure is built for the demands of the agentic era. This hyper-growth highlighted the urgent need for robust access control, security, and scalability across its growing ecosystem of products and services.
Traditional customer identity and access management (CIAM) solutions, reliant on rigid, “black-box” architectures, failed to meet OpenAI's requirements for transparency, innovation, scalability, and self-hosting.
To support its speed of innovation, OpenAI needed a modern CIAM platform that could support its analytics and integrate across cloud environments.
Addressing these challenges meant taking an IAM approach that aligned with their strategic vision while avoiding vendor lock-in. By adopting an IAM solution designed for agility and transparency, OpenAI could position itself to deliver secure, frictionless experiences for their users.
OpenAI prioritized open-source solutions built on modern architectures to meet their evolving needs. This focus led to a partnership with Ory, where scalability was tested using Ory Network alongside CockroachDB.
Testing demonstrated how Ory's authentication and authorization capabilities, paired with CockroachDB’s distributed architecture, delivered the performance, resilience, and scalability required for OpenAI's complex ecosystem.
OpenAI adopted an Ory Enterprise License for Ory Hydra's web-scale authorization. The collaboration with Ory and Cockroach Labs addresses challenges in scaling, compliance, and flexibility on a daily basis, giving OpenAI greater control over its CIAM stack while enabling faster innovation and secure, seamless user access.
OpenAI wanted a partner that could help enable our vision for owning our identity processes, data, and success. We have a lot of partners, and Ory is one of our best.
Benjamin Billings, Engineering Manager at OpenAI
OpenAI is rapidly building its new identity experiences, having already enabled unprecedented logins per second with levels of data transparency and infrastructure flexibility that were not possible with other vendor solutions.
With Ory, OpenAI is empowered with the ability to:
As OpenAI continues its rapid growth, their need for highly scalable, resilient, and observable identity systems has become paramount. Ory's modern CIAM capabilities will continue to enable OpenAI to go beyond the limitations of legacy identity systems.
By combining CockroachDB's distributed architecture with Ory's modern IAM platform, we delivered a scalable, resilient solution tailored to meet OpenAI's unique and complex needs.
Allen Terleto, VP Global Partnerships at Cockroach Labs
Ory delivers modern IAM/CIAM solutions built on open standards, ensuring interoperability and flexibility across modern tech stacks. Powered by open source and trusted by a global community, Ory is the only CIAM vendor that provides choice from free open-source software and supported Enterprise Licenses to a fully-managed, globally secure, and compliant Ory Network.
The Ory Network is a global, cloud-native identity and access management (IAM) and customer identity and access management (CIAM) platform built for high availability and low latency. It secures user authentication, authorization, and API protection for humans, devices, and software with advanced zero-trust security.
