Subscription passthrough
Let users bring their Claude and ChatGPT subscriptions through the gateway instead of shared API keys.
If you don't see this feature in your console, ask your SecureAuth contact to
enable the llm_gateway feature flag for your organization.
Your users may already sign in to Claude or ChatGPT with their own accounts. A sign-in connection lets each user reach that provider through the gateway with their own sign-in, with no shared API key.
Add a sign-in connection
On Setup › Model Providers, select Add connection, then pick ChatGPT or Claude under Your users' sign-in. Give the connection a name and choose its Allowed models: All models, or Specific models. A sign-in connection takes no API key, and Test connection doesn't appear on it.
What passes through
The gateway passes a claude.ai or ChatGPT sign-in through to the provider as it is. It does not pass provider API keys through, so a call that carries one is refused. Deleting a sign-in connection removes gateway access for the users who reach that provider through it, unless another sign-in connection allows their model. Your model access rules still decide which models each user can call.
For every field and permission on the screen, see Model Providers.