GitHub

To view account activity, licenses, or Copilot AI usage information for GitHub in 1Password SaaS Manager, you’ll need to connect your GitHub organization or enterprise as an owner.

Before you begin

Before you connect GitHub to SaaS Manager, review the following considerations and requirements:

• SaaS Manager can connect to a specific GitHub organization or to an enterprise.
  • To connect an organization, you must have the owner role in that organization.
  • To connect an enterprise, you must have the enterprise owner role, as well as the owner role in each organization you want to connect. Learn how to manage your role in owned organizations.
• SaaS Manager can connect to GitHub Free for organizations, GitHub Team, and GitHub Enterprise Cloud plans. Depending on your plan, SaaS Manager will link GitHub accounts to people in SaaS Manager with these methods:
  • On GitHub Enterprise Cloud plans, SaaS Manager imports email addresses from each person’s linked identity through SAML SSO. For accounts without a linked identity, SaaS Manager will import email addresses from verified domains in your organization or enterprise.
  • Otherwise, SaaS Manager imports GitHub usernames. You can then manually link GitHub accounts to people in SaaS Manager.
• SaaS Manager can only record last sign-in dates if you turn on the GitHub Enterprise option during setup.

Connect GitHub to SaaS Manager

To connect GitHub to SaaS Manager:

1. If you use SAML SSO in your GitHub environment, start an active SAML SSO session for your organization or enterprise.
2. Sign in to SaaS Manager and navigate to Integrations > GitHub.
3. Select Connect, then turn on the features depending on your environment and preferences:
   • Exclude non-SSO users: Turn on this option to prevent SaaS Manager from importing GitHub accounts in your organization that don’t have a linked identity through SAML SSO. SaaS Manager will still import outside collaborators.

     This option only applies if you connect an organization that uses SAML SSO.

   • GitHub Enterprise: Turn on this option to connect SaaS Manager to a GitHub enterprise instead of an organization.
   • Read GitHub Enterprise licences: Turn on this option to have SaaS Manager record billing information that applies to your enterprise, like Advanced Security usage.
   • Read and manage Copilot licences: Turn on this option to allow SaaS Manager to import and manage Copilot seat assignments.*
   • AI Consumption: Before you turn on this option, learn how SaaS Manager records AI usage through Copilot.*
   • Provisioning and Deprovisioning: Before you turn on either of these options, learn how SaaS Manager handles provisioning and deprovisioning in GitHub.
4. Enter the slug for your organization in the Slug field. If you turned on the GitHub Enterprise option, enter the slug for your enterprise instead.
5. Select Connect. You’ll be taken to GitHub to grant SaaS Manager access to your organization. If you’re connecting to an enterprise, make sure to grant access to each of the organizations you want to connect to SaaS Manager.

* Requires a Copilot Business or Copilot Enterprise plan.

If you want to record GitHub Copilot AI usage

Before you choose to record your team’s AI usage in GitHub Copilot, review the following considerations and requirements:

• SaaS Manager records Copilot usage data in two categories:
  • Usage by person: This includes daily AI credits, plus prompt tokens, output tokens, and requests when available.
  • Usage by app: This includes daily AI credits for each model, directly from your GitHub billing data. Model information is only available at the app level.
• When you first connect, SaaS Manager imports up to 90 days of Copilot usage data, then records new usage daily. Usage appears about three days after it’s incurred, and SaaS Manager may update usage within the past seven days as GitHub finalizes its reports.
• If you connect a GitHub enterprise, the “Copilot usage metrics” policy must be set to “Enabled everywhere”.

When you’re ready to continue, turn on AI Consumption, then finish setting up the connection.

If you want to provision or deprovision accounts

Before you turn on the options to provision or deprovision GitHub accounts through SaaS Manager, review the following considerations and requirements:

• SaaS Manager supports provisioning and deprovisioning at the organization level in the GitHub Enterprise Cloud plan.
• You must have SAML SSO set up in the organization you specify in SaaS Manager. If you use Okta or Microsoft Entra ID as your identity provider, you can also choose to sync your team structure with GitHub.
• Invitations that SaaS Manager sends through SCIM don’t expire. Depending on your GitHub billing model, pending invitations may use a license until they’re accepted or deleted.

When you’re ready to continue, turn on Provisioning and/or Deprovisioning and enter your organization slug in the SCIM organization field, then finish setting up the connection.

Get help

If you need to reconnect to GitHub

If you need to reconnect SaaS Manager to GitHub, like if you want to change the features you use in SaaS Manager or to connect to different GitHub organizations, follow these steps:

1. If you use SAML SSO in your GitHub environment, start an active SAML SSO session for your organization or enterprise.
2. In SaaS Manager, navigate to Integrations > GitHub, then select Reconnect.

   If you don’t see the Reconnect button, select the vertical ellipsis > Settings.

3. Follow the steps to connect GitHub to SaaS Manager. Make sure to select the features you want to use and grant access to each of your organizations in GitHub.

If you want to revoke access to an organization in your enterprise

If you connected an enterprise and want to revoke SaaS Manager’s access to one of its organizations, follow GitHub’s documentation to deny access to a previously approved OAuth app. In GitHub, the SaaS Manager app is named Trelica.

After you revoke access, SaaS Manager skips requests that require access to the revoked organization while continuing to record information for the enterprise.

If SaaS Manager shows a warning that it can’t access an organization in your enterprise, you can ignore it if you intentionally revoked access. Otherwise, you can follow the steps to reconnect SaaS Manager to GitHub to resolve the warning.