What is GitHub Organizations
Organizations are shared accounts where businesses and open-source projects can collaborate across many projects at once, with sophisticated security and administrative features.
The following placeholders will be used:
github.com/orgs/foois your GitHub organization, where
foois the name of your org
authentik.companyis the FQDN of the authentik Install
Create an application in authentik and note the slug, as this will be used later. Create a SAML provider with the following parameters:
- ACS URL:
Under Advanced protocol settings, set a certificate for Signing Certificate.
Once the provider is created, it is advised to download the signing certificate as you will need it later.
Navigate to your organization settings by going to your organization page at https://github.com/foo, then click Settings.
In the left-hand navigation, scroll down to the Security section and click
On this page:
- Select the
Enable SAML authenticationcheckbox.
sign-on URL, type
https://authentik.company/application/saml/<authentik application slug>/sso/binding/redirect/
Audienceyou set in authentik
Public certificate, paste the full signing certificate into this field.
- Verify that the
Digest methodmatch your SAML provider settings in authentik.
Once these fields are populated, you can use the
Test SAML configuration button to test the authentication flow. If the flow completes successfully, you will see a green tick next to the Test button.
Scroll down to hit the
Save button below.
This enables SAML as an authentication option. If you want to require SAML for your organization, visit your SSO url at
https://github.com/orgs/foo/sso and sign in. Once signed in, you can navigate back to the
Authentication security page and check
Require SAML SSO authentication for all members of the foo organization.