UniFi Identity Enterprise - Add GitHub as an SSO App

You can manage and secure access to GitHub in Identity Enterprise Manager by enforcing SAML single sign-on (SSO) through Identity Enterprise.

Requirements

To get started, ensure that you have a GitHub Enterprise Owner account.

Add GitHub App to Identity Enterprise

1. Go to your Identity Enterprise Manager > SSO Apps.
2. Click the Add icon on the upper right corner and select GitHub.
3. Click Add. Copy the sign-on URL and Issuer and download the Public Certificate. You’ll need them when configuring SSO in GitHub. 
4. After SSO is configured in GitHub, navigate back to Identity Enterprise Manager, fill in the required information, and click Add.
5. Go to the Assignments tab.
6. Click the Add icon, search, and assign the app to yourself for later testing. Your account in both Identity Enterprise Manager and Atlassian Cloud must use the same email.

Configure SSO in GitHub

1. Sign in to Github.com with a user account that is an enterprise account owner.
2. Click Edit {Your_Organization_Name}’s settings.
3. Go to Organization security and select Enable SAML authentication.
4. Paste the Sign-on URL and Issuer you previously copied from Identity Enterprise Manager.
5. Paste the Public Certificate you previously downloaded from Identity Enterprise Manager.
6. Click the Test SAML configuration to confirm if you can successfully authenticate from the GitHub Enterprise Account to Identity Enterprise. Note: When setting up SAML SSO in your organization, you can test your implementation without affecting your organization members by leaving “Require SAML SSO authentication for all members of the organization” unchecked.
7. Once the test is successful, save the settings.