Codex: أمان Codex وإدارة المؤسسات

Enterprise edition supports SAML SSO with existing identity systems:
1. Configure SAML IdP (Okta, Azure AD, OneLogin, etc.)
2. Set up SSO in the OpenAI enterprise dashboard
3. Employees log in to Codex with corporate accounts
4. Unified identity management

1. OpenAI cannot decrypt enterprise data
2. Keys managed by enterprise KMS
3. Even if OpenAI is breached, data cannot be read
4. Suitable for highly sensitive scenarios

[audit]
log_all_operations = true
log_file = "/var/log/codex/audit.log"
include_shell_output = true
include_file_diffs = true
retention_days = 90

[2026-08-28 10:30:15] USER=alice ACTION=read FILE=src/auth.ts
[2026-08-28 10:30:18] USER=alice ACTION=write FILE=src/auth.ts DIFF=+5,-2
[2026-08-28 10:30:22] USER=alice ACTION=shell CMD="npm test" EXIT=0
[2026-08-28 10:30:25] USER=alice ACTION=network URL=https://registry.npmjs.org

# Enterprise policy configuration
[policy]
# Blocked models
blocked_models = ["gpt-3.5-turbo"]

# Enforced sandbox mode
enforce_sandbox = "workspace-write"

# Blocked operations
blocked_operations = [
    "network_access",
    "system_path_access",
]

# Max parallel tasks
max_parallel_tasks = 5

# Audit requirements
audit_all = true

# Alice's company enterprise policy
[policy]
enforce_sandbox = "workspace-write"
blocked_paths = [".env", "secrets/", "credentials/"]
blocked_operations = ["network_access"]
audit_all = true
retention_days = 180

[approval]
shell_commands = "ask"
file_writes = "ask"
network_access = "deny"