GitHub Enterprise Server

To view account activity for GitHub Enterprise Server in 1Password SaaS Manager, you’ll need to create an OAuth app for SaaS Manager in your GitHub Enterprise Server instance.

Before you begin

Before you connect GitHub Enterprise Server to SaaS Manager, review the following considerations and requirements:

• To connect GitHub Enterprise Server, you must have the enterprise owner role in your instance.
• If you want to suspend or delete users through SaaS Manager, you must also be a site administrator. If you use LDAP Sync with Active Directory, SaaS Manager can’t suspend users who authenticate through LDAP. You’ll have to manually remove them from your LDAP server.
• SaaS Manager doesn’t support provisioning accounts in GitHub Enterprise Server.
• Your GitHub Enterprise Server instance must be accessible from the internet over HTTPS with a trusted TLS certificate. If you restrict inbound traffic to your GitHub instance, allow the IP addresses for your SaaS Manager region.
• SaaS Manager links GitHub accounts to people in SaaS Manager using email addresses from verified domains in your organization or enterprise. If SaaS Manager can’t find an email address, it imports GitHub usernames, so you can manually link GitHub accounts to people in SaaS Manager.
• When you first connect, SaaS Manager imports up to three months of sign-in activity.
• SaaS Manager records last sign-in dates from web sign-ins in your enterprise’s audit log. Activity through Git, like pushing or pulling code, isn’t included, so people who only use Git may appear inactive.

Connect GitHub Enterprise Server to SaaS Manager

Follow these steps to create an OAuth app for SaaS Manager in your GitHub Enterprise Server instance:

1. Follow GitHub’s documentation to create an OAuth app.
2. When you create your app, enter the following details:
   • Application name: Enter 1Password SaaS Manager.
   • Homepage URL: Enter https://1password.com/product/saas-manager.
   • Authorization callback URL: Enter the URL that corresponds to your SaaS Manager region.
     • If you sign in to SaaS Manager at trelica.app, enter https://trelica.app/IntegrationsApi/Integrations/GitHubServer/AuthCallback.
     • If you sign in to SaaS Manager at trelica.eu, enter https://trelica.eu/IntegrationsApi/Integrations/GitHubServer/AuthCallback.
3. After you finish registering the app, select Generate a new client secret. GitHub only shows the client secret once, so you may want to save it in your secrets manager in case you need to access it later.
4. In a separate tab, sign in to SaaS Manager and navigate to Integrations > GitHub Enterprise Server.
5. Select Connect. If you want to suspend or delete users in GitHub through SaaS Manager, turn on the Suspend and delete users option.
6. Enter the required details. You can find the Client ID and “Client secret” values in your GitHub tab.
7. Select Connect.