Github: SAML, Okta, and Github Enterprise Cloud – Organization SSO configuration
Tags: git, security, tutorial
Published: 2019-10-21 19:38:09

---
title: Github: SAML, Okta, and Github Enterprise Cloud – Organization SSO configuration
published: true
date: 2019-10-21 14:50:50 UTC
tags: git,security,tutorial
canonical_url: https://rtfm.co.ua/en/github-saml-okta-and-github-enterprise-cloud-organization-sso-configurartion/
---

![](https://rtfm.co.ua/wp-content/uploads/2016/05/github_logo.jpg)As a follow-up to the SSO, Okta, and SAML.

We already did everything for our Jenkins (see the [Jenkins: SAML, Okta, user groups, and Role-Based Security plugin post](https://rtfm.co.ua/en/jenkins-saml-okta-users-groups-and-role-based-security-plugin/)) – now it’s time to do the same thing with our Github organization.

The idea is the same as for the Jenkins’ setup: keep all users in the Okta, during Github’s (our Service provider, _SP_) login – it has to ask our Identity Provider, _IDP_ (Okta this case) to authenticate this user using SAML.

Let’s use the [Okta Github Enterprise Cloud – Organization](https://www.okta.com/integrations/github-enterprise-cloud-organization/) application.

Documentation:

- [How to Configure SAML 2.0 for GitHub Enterprise Cloud – Organization](https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Github-com.html)
- [About authentication with SAML single sign-on](https://help.github.com/en/github/authenticating-to-github/about-authentication-with-saml-single-sign-on)

I didn’t found yet how to realize the Groups to be passed from an Okta user’s account to Github, but I hope this is can be done.

### Trial Github Enterprise Cloud – Organization

To have an ability to use SAML in a Github’s organization need to have the [Github Enterprise Cloud – Organization](https://help.github.com/articles/githubs-products).

Go to your Github’s Organization, _Settings > Security_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_160722.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_160722.png)

Now there is no SAML available.

For the testing purpose let’s create a new Github Organization with the Enterprise Trial subscription.

Go to the [GitHub Enterprise Cloud](https://github.com/enterprise):

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_160847.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_160847.png)

Click on the Trial, create the new organization:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161005.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161005.png)

Can add users from here:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161044.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161044.png)

Now my user, which was used during the organization’s creation, has  access to three organizations – working, RTFM’s and the Testing, just created:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161121.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161121.png)

Now, go to the organization created _Settings – Security,_ and you can see SAML available here:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161530.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161530.png)

### Okta SAML – Github Enterprise Cloud – Organization configuration

Go to the в _Okta – Applications – Add application_, find the _Github Enterprise Cloud – Organization_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161830.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161830.png)

Set the organization name in the same view as it is in the Github:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161922.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161922.png)

Go to the _Sign On_ tab:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161956.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_161956.png)

Click on the _View Setup Instructions_ – you’ll be redirected to a page with already defined settings for your SAML:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_163400.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_163400.png)

### SAML configuration in the Github Organization

Go to the Github, click on the _Enable SAML authentication_, fill the fields with the data from the _View Setup Instructions_ page, here is just three fields to copy-past:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_163629.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_163629.png)

Go back to the Github application in the Okta, switch to the _Assignments_ tab and assign a user:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_163945.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_163945.png)

In the Github click on the _Test SAML configuration_: – you’ll be redirected to the Okta to authenticate:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_163758.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_163758.png)

Log in with the _Test_ user – test passed:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164400.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164400.png)

Do not forget to press the _Save_ on the bottom.

#### SAML checking

Find your SSO URL:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164614.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164614.png)

Open it in an _Incognito_:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164634.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164634.png)

Click the _Continue_ button – must be redirected to the Okta:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164655.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164655.png)

Here you can or create a new Github’s user – or log in with an already existing one.

In any case – Okta will use Just In Time (_JIT_) Provisioning to add this user to the Github’s organization:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164812.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164812.png)

Log in:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164847.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164847.png)

And now you are able to see the organization’s data:

[![](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164918.png "Github: SAML Okta - настройка SSO в Github Enterprise Cloud - Organization")](https://rtfm.co.ua/wp-content/uploads/2019/10/Screenshot_20191018_164918.png)

Done.

Need to find out how to deal with groups now.

### Similar posts
  
- <small>10/15/2019</small> [Jenkins: SAML, Okta, users groups and Role-Based Security plugin](https://rtfm.co.ua/en/jenkins-saml-okta-users-groups-and-role-based-security-plugin/)
- <small>10/11/2019</small> [Jenkins: SAML Authentication with Okta SSO and users groups](https://rtfm.co.ua/en/jenkins-saml-authentication-via-okta-and-users-groups/)
- <small>09/30/2019</small> [Okta: SSO authentication for Gmail and Slack](https://rtfm.co.ua/en/okta-sso-authentication-for-gmail-and-slack/)