Start the SurePath AI configuration by logging into the platform:
Access the Admin interface at:
Log in using the Magic Link authentication method.
You can add additional admin users as needed:
Note: end users will be imported during the Directory Synchronization step
SSO configuration integration
Access the SurePath AI admin interface to setup SSO in the Identity tab at:
Instructions can be found here:
Directory synchronization
Access the SurePath AI admin interface to setup SCIM in the Identity tab at:
Instructions can be found here:
Configure your Default Policy for GenAI
Public service access: https://admin.surepath.ai/config/default-policy?tab=service-access
Private model and data source access: https://admin.stage.surepath.ai/config/default-policy?tab=portal
Setup Public Services Traffic Interception
Traffic intercept is required for Public GenAI service interception
Traffic intercept is NOT required for access to https://portal.surepath.ai or https://admin.surepath.ai
All available traffic intercept methods are documented here: https://help.surepath.ai/en/collections/11740645-traffic-integration-interception
Choose the integration that best fits the available tools in the organization
SASE methods of traffic intercept are preferred if available
In addition to the above steps you can also brand messaging to your end users in the tabs here: https://admin.surepath.ai/config/org-settings?tab=branding
Setup a Private Model
You will first setup a Connector and enter authentication information at:
Instructions can be found here:
Add a Private Model
Assign and allow the private model and allow public models in the default policy:
Access the Private Model via the SurePath AI Portal at:
This model will be used exclusively by your organization and resides in your cloud environment.
Additional charges for the private model(s) will be applied to your account from your Cloud provider, not SurePath AI.
Review the RBAC/Group Based Security Model
View the security group design:
These rules apply to public/private model access and context data.
Everyone will have the Default Policy applied to their traffic.
Configure additional groups as needed.