You can control access to your organization on GitHub.com and other web applications from one central interface by configuring the organization to use SAML SSO and SCIM with Okta, an Identity Provider (IdP).
SAML SSO controls and secures access to organization resources like repositories, issues, and pull requests. SCIM automatically adds, manages, and removes members' access to your organization on GitHub.com when you make changes in Okta. For more information, see "About identity and access management with SAML single sign-on" and "About SCIM."
After you enable SCIM, the following provisioning features are available for any users that you assign your GitHub Enterprise Cloud application to in Okta.
|Push New Users||When you create a new user in Okta, the user will receive an email to join your organization on GitHub.com.|
|Push User Deactivation||When you deactivate a user in Okta, Okta will remove the user from your organization on GitHub.com.|
|Push Profile Updates||When you update a user's profile in Okta, Okta will update the metadata for the user's membership in your organization on GitHub.com.|
|Reactivate Users||When you reactivate a user in Okta, Okta will send an email invitation for the user to rejoin your organization on GitHub.com.|
Alternatively, you can configure SAML SSO for an enterprise using Okta. SCIM for enterprise accounts is only available with Enterprise Managed Users. For more information, see "Configuring SAML single sign-on for your enterprise using Okta" and "Configuring SCIM provisioning for Enterprise Managed Users with Okta."
- Sign into your Okta account.
- Navigate to the Github Enterprise Cloud - Organization application in the Okta Integration Network and click Add Integration.
- Optionally, to the right of "Application label", type a descriptive name for the application.
- In the GitHub Organization field, type the name of your organization on GitHub.com. For example, if your organization's URL is https://github.com/octo-org, the organization name would be
- Click Done.
- Sign into your Okta account.
- In the left sidebar, use the Applications dropdown and click Applications.
- In the list of applications, click the label for the application you created for the organization that uses GitHub Enterprise Cloud.
- Assign the application to your user in Okta. For more information, see Assign applications to users in the Okta documentation.
- Under the name of the application, click Sign on.
- Under "SIGN ON METHODS", click View Setup Instructions.
- Enable and test SAML SSO on GitHub using the sign on URL, issuer URL, and public certificates from the "How to Configure SAML 2.0" guide. For more information, see "Enabling and testing SAML single sign-on for your organization."
In the left sidebar, use the Applications dropdown and click Applications.
In the list of applications, click the label for the application you created for the organization that uses GitHub Enterprise Cloud.
Under the name of the application, click Provisioning.
Click Configure API Integration.
Select Enable API integration.
Click Authenticate with Github Enterprise Cloud - Organization.
To the right of your organization's name, click Grant.
Note: If you don't see your organization in the list, go to
https://github.com/orgs/ORGANIZATION-NAME/ssoin your browser and authenticate with your organization via SAML SSO using your administrator account on the IdP. For example, if your organization's name is
octo-org, the URL would be
https://github.com/orgs/octo-org/sso. For more information, see "About authentication with SAML single sign-on."
Click Authorize OktaOAN.
To avoid syncing errors and confirm that your users have SAML enabled and SCIM linked identities, we recommend you audit your organization's users. For more information, see "Auditing users for missing SCIM metadata."
To the right of "Provisioning to App", click Edit.
To the right of Create Users, Update User Attributes, and Deactivate Users, select Enable.
- "Configuring SAML single sign-on for your enterprise account using Okta"
- "Managing team synchronization for your organization"
- Understanding SAML in the Okta documentation
- Understanding SCIM in the Okta documentation