GitHub Enterprise Cloud
What is GitHub Enterprise Cloud
GitHub is a complete developer platform to build, scale, and deliver secure software. Businesses use our suite of products to support the entire software development lifecycle, increasing development velocity and improving code quality.
GitHub Enterprise Cloud EMU (Enterprise Managed Users) are not compatible with authentik. GitHub currently only permits SAML/OIDC for EMU organizations with Okta and/or Azure AD.
The following placeholders will be used:
github.com/enterprises/foois your GitHub organization, where
foois the name of your enterprise
authentik.companyis the FQDN of the authentik Install
Create an application in authentik and note the slug, as this will be used later. Create a SAML provider with the following parameters:
- ACS URL:
Under Advanced protocol settings, set a certificate for Signing Certificate.
Once the provider is created, it is advised to download the signing certificate as you will need it later.
Navigate to your enterprise settings by clicking your GitHub user portrait in the top right of GitHub.com, select
Your enterprises and click
Settings for the enterprise you wish to configure.
In the left-hand navigation, within the
Settings section, click
On this page:
- Select the
Require SAML authenticationcheckbox.
Sign on URL, type
https://authentik.company/application/saml/<authentik application slug>/sso/binding/redirect/
Audienceyou set in authentik
Public certificate, paste the full signing certificate into this field.
- Verify that the
Digest methodmatch your SAML provider settings in authentik.
Once these fields are populated, you can use the
Test SAML configuation button to test the authentication flow. If the flow completes successfully, you will see a green tick next to the Test button.
Scroll down to hit the
Save button below.