How do I enable Single Sign-On via GitHub?

  • 17 January 2023
  • 1 reply
  • 112 views

As the company administrator, you can choose to enable single sign-on for the users to log in via GitHub.

 

 

How to enable single sign on via GitHub

  1. Go to Admin tools in the left side menu

  2. Input your password to enter the administrative mode

  3. In the User permissions tab, toggle the SSO with GitHub to enable the feature

  4. Click on the +Add organizations button to add your organization - everyone who is part of it will be able to create their account or log in via the GitHub SSO

 

How to whitelist email domains

As the company administrator, you are able to filter which users in your organization can use SSO by whitelisting email domains.

To whitelist a new email domain:

  1. Go to Admin tools in the left side menu

  2. Input your password to enter the administrative mode

  3. In the User permissions tab, under Whitelist user domains, enter all domains (starting with “@”, e.g. “@debricked.com”) and click on Save

  4. From now on only users with those email domains will have access to SSO

 

User management using SSO

Keep in mind that all the users who are part of the organization on GitHub are able to join your company account on Debricked. If a user has a different email address on GitHub than the Debricked account, a new account will be created when the user logs in to Debricked for the first time. If the user wants to use SSO, the company admin may remove the their other account.

 

Access control

It is currently not possible to prevent a user from logging in using a specific method if they signed up through an invite email and the SSO is enabled. 

However, since accounts with email login can only be created via invites from an admin, if the admin does not invite users and instead enables SSO, then only SSO may be used.


1 reply

Badge

As the company administrator, you can choose to enable single sign-on for the users to log in via GitHub.

 

 

How to enable single sign on via GitHub

  1. Go to Admin tools in the left side menu

  2. Input your password to enter the administrative mode

  3. In the User permissions tab, toggle the SSO with GitHub to enable the feature

  4. Click on the +Add organizations button to add your organization - everyone who is part of it will be able to create their account or log in via the GitHub SSO

 

How to whitelist email domains

As the company administrator, you are able to filter which users in your organization can use SSO by whitelisting email domains.

To whitelist a new email domain:

  1. Go to Admin tools in the left side menu

  2. Input your password to enter the administrative mode

  3. In the User permissions tab, under Whitelist user domains, enter all domains (starting with “@”, e.g. “@debricked.com”) and click on Save

  4. From now on only users with those email domains will have access to SSO

 

User management using SSO

Keep in mind that all the users who are part of the organization on GitHub are able to join your company account on Debricked. If a user has a different email address on GitHub than the Debricked account, a new account will be created when the user logs in to Debricked for the first time. If the user wants to use SSO, the company admin may remove the their other account.

 

Access control

It is currently not possible to prevent a user from logging in using a specific method if they signed up through an invite email and the SSO is enabled. 

However, since accounts with email login can only be created via invites from an admin, if the admin does not invite users and instead enables SSO, then only SSO may be used.

 

Reply