--- title: GitHub EMU Provisioner description: The PingFederate GitHub Enterprise Managed Users (EMU) Provisioner enables an enterprise to provision users and groups to GitHub. A quick connection template is also included to simplify the configuration of single sign-on (SSO). component: github page_id: github:github_emu_provisioner:pf_github_emu_connector canonical_url: https://docs.pingidentity.com/integrations/github/github_emu_provisioner/pf_github_emu_connector.html revdate: June 25, 2024 section_ids: features: Features intended-audience: Intended audience system-requirements: System requirements --- # GitHub EMU Provisioner The PingFederate GitHub Enterprise Managed Users (EMU) Provisioner enables an enterprise to provision users and groups to GitHub. A quick connection template is also included to simplify the configuration of single sign-on (SSO) *(tooltip: \
\

The process of authenticating an identity (signing on) at one website (usually with a user ID and password) and then accessing resources secured by other domains without reauthenticating.\

\
)*. Learn more about GitHub EMU in the [GitHub website](https://docs.github.com/en/enterprise-cloud@latest/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/about-enterprise-managed-users#about-enterprise-managed-users). ## Features * Outbound User Provisioning * Outbound Group Provisioning * Browser-based SSO initiated by the service provider (SP) *(tooltip: \
\

In SAML, an entity that receives and accepts an authentication assertion issued by an IdP, typically for the purpose of allowing access to a protected resource.\

\
)* or identity provider (IdP) *(tooltip: \
\

A service that manages identity information and provides authentication services to relying clients or SPs within a federated or distributed network.\

\
)* * Pre-populates some connection settings with the included quick connection template and Security Assertion Markup Language (SAML) *(tooltip: \
\

A standard, XML-based, message-exchange framework enabling the secure transmittal of authentication tokens and other user attributes across domains.\

\
)* metadata file * Includes support for user life cycle management (including create, update, disable, and delete) * Includes configuration options for workflow capabilities (for example, the ability to disable updates) | | | | - | ---------------------------------------------------------------------------------------- | | | GitHub EMU does not support user or group provisioning until you configure SSO and SAML. | ## Intended audience This document is intended for PingFederate administrators. If you need help during the setup process, see the following sections of the PingFederate documentation: * [SP connection management](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_sp_connect_management.html) * [Identity provider SSO configuration](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_ident_provid_sso_config.html) * [Datastores](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_datastores.html) * [Configuring outbound provisioning](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_spconnectionconfigtasklet_saasprovisioningstate.html) * [Configuring outbound provisioning settings](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_protocolsettingstasklet_saasglobalprovisioningsettingsstate.html) ## System requirements * PingFederate 9.0 or later with Java 8. * Could require the following endpoints to be allowlisted on the firewall to allow outbound connections: * https\://api.github.com/scim/v2/enterprises/*\* * https\://api.*\*.ghe.com/scim/v2/enterprises/*\* for EMU data residency * A GitHub Enterprise Cloud account with Enterprise Managed Users and SAML SSO enabled.