GitHub

GitHub EMU Provisioner

The PingFederate GitHub Enterprise Managed Users (EMU) Provisioner enables an enterprise to provision users and groups to GitHub. A quick connection template is also included to simplify the configuration of single sign-on (SSO).

Learn more about GitHub EMU in the GitHub website.

Features

  • Outbound User Provisioning

  • Outbound Group Provisioning

  • Browser-based SSO initiated by the service provider (SP) or identity provider (IdP)

  • Pre-populates some connection settings with the included quick connection template and Security Assertion Markup Language (SAML) metadata file

  • Includes support for user life cycle management (including create, update, disable, and delete)

  • Includes configuration options for workflow capabilities (for example, the ability to disable updates)

GitHub EMU does not support user or group provisioning until you configure SSO and SAML.

Intended audience

This document is intended for PingFederate administrators.

If you need help during the setup process, see the following sections of the PingFederate documentation:

System requirements

  • PingFederate 9.0 or later with Java 8.

  • Could require the following endpoints to be allowlisted on the firewall to allow outbound connections:

    • https://api.github.com/scim/v2/enterprises/<enterprise slug>

    • https://api.<enterprise_slug>.ghe.com/scim/v2/enterprises/<enterprise_slug> for EMU data residency

  • A GitHub Enterprise Cloud account with Enterprise Managed Users and SAML SSO enabled.