Skip to main content
GitHub Docs
Version:
Enterprise Server 3.8
Search GitHub Docs
Enterprise administrators
/
Identity and access management
Home
Enterprise administrators
Overview
About GitHub for enterprises
Enterprise Cloud trial
About GitHub Enterprise Server
Enterprise Server trial
About upgrades
About enterprise accounts
System overview
GitHub Enterprise API
Best practices
Installation
Set up an instance
Install on AWS
Install on Azure
Install on GCP
Install on Hyper-V
Install on OpenStack
Install on VMware
Set up a staging instance
Configuration
Configure user applications
Configuring applications
Configure email notifications
Configure GitHub Pages
Configuring rate limits
Configure web commit signing
Manage GitHub Mobile
Verify or approve a domain
Harden security
Configuring TLS
Troubleshoot TLS errors
Enabling private mode
Enable subdomain isolation
Configure host keys
Configure SSH connections
Configure referrer policy
Configure network settings
Set the IP using the console
Configure DNS servers
Configure hostname
Change hostname
Validate domain settings
Configure an outbound proxy
Configure firewall rules
Network ports
Use a load balancer
Configure time settings
GitHub Connect
About GitHub Connect
Manage GitHub Connect
Automatic user license sync
Dependabot
Server Statistics
Unified search
Unified contributions
Administer your instance
Web UI
About the Management Console
Manage Management Console access
Access Management Console
Troubleshoot Management Console
Site admin dashboard
Command line
Access the admin shell (SSH)
Command-line utilities
Maintenance mode
Configure maintenance mode
Identity and access management
Understand enterprise IAM
About IAM
About SAML for IAM
Change authentication methods
Fallback authentication
Troubleshoot IAM
IAM configuration reference
SAML reference
Username considerations
Built-in authentication
Configure built-in authentication
Invite people
Block unauthenticated sign-up
CAS for enterprise IAM
Using CAS
LDAP for enterprise IAM
Using LDAP
SAML for enterprise IAM
Configure SAML SSO
Configure SCIM user provisioning
Configure with Azure AD
Enable encrypted assertions
Update SAML NameID
Troubleshoot SAML SSO
Manage accounts and repositories
Communicate info to users
Customizing user messages
Configure custom footers
Manage users
Roles in an enterprise
User security best practices
Invite people to manage
Manage administrators
View people in your enterprise
Audit users
Impersonate a user
Managing dormant users
Manage user suspension
Place a legal hold
Auditing SSH keys
Rebuild contributions
Manage organizations
Best practices
Set membership visibility
Prevent organization creation
Require 2FA
Manage your organization roles
Restore organization
Project management with Jira
CI using Jenkins
Manage repositories
Configure Git LFS
Internal repository migration
Disable SSH for Git
Lock a repository
Restore a deleted repository
Troubleshoot service hooks
Back up and restore
Configuring backups
Known issues with backups
Policies
Enforce policies
About enterprise policies
Repository management policies
Team policies
Project board policies
Restrict email notifications
Policies for security settings
GitHub Actions policies
Code security & analysis
Policy with pre-receive hooks
About pre-receive hooks
Pre-receive hook environments
Pre-receive hook scripts
Manage pre-receive hooks
Monitor user activity
Review audit logs
About audit logs
Access audit logs
Configure audit logs
Search audit logs
Identify events by token
Stream audit logs
Audit log API
Audit log events
Explore user activity
Activity dashboard
Viewing push logs
Log forwarding
Manage global webhooks
Server Statistics
About Server Statistics
Export Server Statistics
Server Statistics and REST API
Include data about Actions
Monitor, manage, and update your instance
Monitor your instance
Access the monitor dashboard
Recommended alert thresholds
Set up external monitoring
Configure collectd
collectd metrics
Monitoring using SNMP
About system logs
Generating a Health Check for your enterprise
Update VM & resources
Upgrade requirements
Upgrading GHES
Enable automatic update checks
Increase storage capacity
Increase CPU or memory
Migrate from 11.10.x to 2.1.23
Known issues with upgrades
Configuring clustering
About clustering
Choosing cluster or HA
About cluster nodes
Configure a cluster network
Initializing the cluster
Upgrading a cluster
Monitor cluster health
Evacuating a data node
Replacing a cluster node
Configure high availability
About HA configuration
Create HA replica
Monitor HA configuration
Initiate failover to appliance
Recover a HA configuration
Remove a HA replica
About geo-replication
Caching repositories
About repository caching
Configuring a repository cache
GitHub Actions
Get started
About GitHub Actions
Introduce Actions
Migrate to Actions
Get started
Self-hosted runners
Enable GitHub Actions
Azure Blob storage
Amazon S3 storage
Google Cloud Storage
MinIO storage
Dependabot updates
Manage access to actions
About actions in your enterprise
Use GitHub Connect for actions
Manually sync actions
Use the latest bundled actions
Tool cache for offline runners
HA & troubleshooting
HA for GitHub Actions
Backing up and restoring
Use staging environment
Troubleshoot GitHub Actions
Packages
Getting started with GitHub Packages
Enable Packages with AWS
Enable Packages with Azure
Enable Packages with MinIO
Quickstart for MinIO
Configure package ecosystems
Migrate to Container registry
Code security
GitHub Advanced Security
Enabling GitHub Advanced Security
Manage GitHub Advanced Security
Configuring code scanning
Configuring dependency review
Configuring secret scanning
Supply chain security
About supply chain security
Enable dependency graph
View vulnerability data
Limited internet access
Guides
Release notes
Releases
Enterprise administrators
/
Identity and access management
Identity and access management
You can configure how people access your GitHub Enterprise Server instance.
Understanding IAM for enterprises
About identity and access management
About SAML for enterprise IAM
Changing authentication methods
Allowing built-in authentication for users outside your provider
Troubleshooting identity and access management for your enterprise
IAM configuration reference
SAML configuration reference
Username considerations for external authentication
Using built-in authentication
Configuring built-in authentication
Inviting people to use your instance
Disabling unauthenticated sign-ups
Using CAS for enterprise IAM
Using CAS
Using LDAP for enterprise IAM
Using LDAP
Using SAML for enterprise IAM
Configuring SAML single sign-on for your enterprise
Configuring user provisioning with SCIM for your enterprise
Configuring authentication and provisioning for your enterprise using Azure AD
Enabling encrypted assertions
Updating a user's SAML NameID
Troubleshooting SAML authentication