diff --git a/command/base_predict_test.go b/command/base_predict_test.go
index 387b8f0b84..72c2a945f6 100644
--- a/command/base_predict_test.go
+++ b/command/base_predict_test.go
@@ -390,6 +390,7 @@ func TestPredict_Plugins(t *testing.T) {
 				"redis-elasticache-database-plugin",
 				"redshift-database-plugin",
 				"saml",
+				"scep",
 				"snowflake-database-plugin",
 				"ssh",
 				"terraform",
@@ -444,6 +445,14 @@ func TestPredict_Plugins(t *testing.T) {
 						}
 					}
 				}
+				if !strutil.StrListContains(act, "scep") {
+					for i, v := range tc.exp {
+						if v == "scep" {
+							tc.exp = append(tc.exp[:i], tc.exp[i+1:]...)
+							break
+						}
+					}
+				}
 				if d := cmp.Diff(act, tc.exp); len(d) > 0 {
 					t.Errorf("expected: %q, got: %q, diff: %v", tc.exp, act, d)
 				}
diff --git a/helper/builtinplugins/registry_test.go b/helper/builtinplugins/registry_test.go
index dda57921ab..a6d57c1801 100644
--- a/helper/builtinplugins/registry_test.go
+++ b/helper/builtinplugins/registry_test.go
@@ -99,7 +99,7 @@ func Test_RegistryKeyCounts(t *testing.T) {
 			name:       "number of auth plugins",
 			pluginType: consts.PluginTypeCredential,
 			want:       18,
-			entWant:    1,
+			entWant:    2,
 		},
 		{
 			name:       "number of database plugins",
diff --git a/scripts/gen_openapi.sh b/scripts/gen_openapi.sh
index b0c3bba1ee..fa5ca90733 100755
--- a/scripts/gen_openapi.sh
+++ b/scripts/gen_openapi.sh
@@ -94,6 +94,7 @@ if [[ -n "${VAULT_LICENSE:-}" ]]; then
     vault secrets enable "kmip"
     vault secrets enable "transform"
     vault auth enable "saml"
+    vault auth enable "scep"
 fi
 
 # Output OpenAPI, optionally formatted