GitHub Enterprise Cloud
Last reviewed: 5 months ago
This guide covers how to configure GitHub Enterprise Cloud ↗ as a SAML application in Cloudflare Zero Trust.
- An identity provider configured in Cloudflare Zero Trust
- A GitHub Enterprise Cloud subscription
- Access to a GitHub account as an organization owner
- In Zero Trust ↗, go to Access > Applications.
- Select Add an application > SaaS > Select.
- For Application, select Github.
- For the authentication protocol, select SAML.
- Select Add application.
- Fill in the following fields:
- Entity ID:
https://github.com/orgs/<your-organization> - Assertion Consumer Service URL:
https://github.com/orgs/<your-organization>/saml/consume - Name ID format: Email
- Entity ID:
- Copy the SSO endpoint, Access Entity ID or Issuer, and Public key.
- Select Save configuration.
- Configure Access policies for the application.
- Select Done.
- Paste the Public key in a text editor.
- Wrap the certificate in
-----BEGIN CERTIFICATE-----and-----END CERTIFICATE-----.
- In your Github organization page, go to Settings > Authentication security.
- Under SAML single sign-on, turn on Enable SAML authentication.
- Fill in the following fields:
- Sign on URL: SSO endpoint from application configuration in Cloudflare Zero Trust.
- Issuer: Access Entity ID or Issuer from application configuration in Cloudflare Zero Trust.
- Public certificate: Paste the entire x.509 certificate from step 2. Create a x.509 certificate.
Select Test SAML configuration. You will be redirected to the Cloudflare Access login screen and prompted to sign in with your identity provider. When this is successful, select Save.
You can also turn on Require SAML SSO authentication for all members of your organization if you want to enforce SSO login with Cloudflare Access.