Skip to main content
ドキュメントには頻繁に更新が加えられ、その都度公開されています。本ページの翻訳はまだ未完成な部分があることをご了承ください。最新の情報については、英語のドキュメンテーションをご参照ください。本ページの翻訳に問題がある場合はこちらまでご連絡ください。
 

 

Enabling encrypted assertions

ここには以下の内容があります:

You can improve GitHub Enterprise Serverインスタンス's security with SAML single sign-on (SSO) by encrypting the messages that your SAML identity provider (IdP) sends.

Site administrators can configure encrypted assertions for a GitHub Enterprise Server instance.

About encrypted assertions

If your IdP support encryption of assertions, you can configure encrypted assertions on GitHub Enterprise Server for increased security during the authentication process.

必要な環境

To enable encrypted assertions for authentication to GitHub Enterprise Server, you must configure SAML authentication, and your IdP must support encrypted assertions.

Enabling encrypted assertions

To enable encrypted assertions, you must provide GitHub Enterprise Serverインスタンス's public certificate to your IdP, and configure encryption settings that match your IdP.

注釈: GitHub strongly recommends that you verify any new configuration for authentication in a staging environment. An incorrect configuration could result in downtime for GitHub Enterprise Serverインスタンス. 詳しい情報については "ステージングインスタンスのセットアップ"を参照してください。

  1. Optionally, enable SAML debugging. SAML debugging records verbose entries in GitHub Enterprise Server's authentication log, and may help you troubleshoot failed authentication attempts. For more information, see "Troubleshooting SAML authentication."

  2. From an administrative account on GitHub Enterprise Server, in the upper-right corner of any page, click .

    Screenshot of the rocket ship icon for accessing site admin settings

  3. If you're not already on the "Site admin" page, in the upper-left corner, click Site admin.

    Screenshot of "Site admin" link

  4. 左のサイドバーでManagement Consoleをクリックしてください。 左のサイドバーのManagement Consoleタブ

  5. 左のサイドバーでAuthentication（認証）をクリックしてください。 設定サイドバーの認証タブ

  6. Select Require encrypted assertions.

    Screenshot of "Enable encrypted assertions" checkbox within management console's "Authentication" section

  7. To the right of "Encryption Certificate", click Download to save a copy of GitHub Enterprise Serverインスタンス's public certificate on your local machine.

    Screenshot of "Download" button for public certificate for encrypted assertions

  8. Sign into your SAML IdP as an administrator.

  9. In the application for GitHub Enterprise Serverインスタンス, enable encrypted assertions.

    • Note the encryption method and key transport method.
    • Provide the public certificate you downloaded in step 7.

  10. Return to the management console on GitHub Enterprise Serverインスタンス.

  11. To the right of "Encryption Method", select the encryption method for your IdP from step 9.

    Screenshot of "Encryption Method" for encrypted assertions

  12. To the right of "Key Transport Method", select the key transport method for your IdP from step 9.

    Screenshot of "Key Transport Method" for encrypted assertions

  13. Save settings（設定の保存）をクリックしてください。

  14. 設定が完了するのを待ってください。

    インスタンスの設定

If you enabled SAML debugging to test authentication with encrypted assertions, disable SAML debugging when you're done testing. For more information, see "Troubleshooting SAML authentication."