Automate SSO authorization for classic PATs and SSH keys
Enterprise administrators can now programmatically authorize existing classic personal access tokens and SSH keys for organizations within GitHub Enterprise Cloud. This capability eliminates the requirement for individual developers to manually authorize these credentials on a per-organization basis.
Verified State Diff
Impact & Verification Analysis
GitHub Enterprise Cloud administrators and developers working within organizations that enforce SAML SSO.
It significantly reduces administrative overhead and potential security gaps caused by unlinked credentials, while improving the developer experience by removing manual authorization steps during SSO enforcement.
Full Fact Overview
This update addresses a significant administrative bottleneck in GitHub Enterprise Cloud environments where SSO enforcement is active. Previously, when an organization enforced SAML SSO, developers were required to manually trigger an authorization flow for every existing classic PAT and SSH key to link them to the organization's identity provider. By enabling automated authorization, GitHub allows enterprise admins to streamline the onboarding and compliance process, ensuring that credentials are mapped to SSO identities without relying on end-user intervention. This shift moves the burden of credential lifecycle management from the individual developer to the enterprise administrative layer, reducing friction in security-hardened environments.