Security at GitHub Enterprise - Enterprise Managed Users

[@kimsyvers]

Great video Marcio. What has changed since you made this video over 2 years ago? I'm looking at using Enterprise Personal Accounts with SSO+SCIM and it seems to me that by using this configuration you get the same level of security as EMU when considering onboarding/off-boarding of users but at the same time you add some additional flexibility to the developers?

[@adrianpuentez]

Thansk Marcio, great video. I was wondering what happens with SSH Keys and Personal Access Tokens. Do they work the same? Can they be audited, managed and revoked by the company on an enterprise level? currently there is no way to do this in the current schema plus PATs administration is even more limited. I was wondering if an Enterprise EMU enabled provides more features and controls over these user authentication methods.

[@martedesco]

Hi Adrián! Thanks for your feedback! SSH keys and PATs work in the same fashion as per the standard GitHub Enterprise Cloud account. We are working in two fronts to improve programatic access to your GitHub resources : 1) Improving the PATs experience offering more controls at the organization level (this has started with this product roadmap item: github.com/github/roadmap/issues/184) 2) Azure AD Service Principals support which will allow an improved management of service accounts and programatic access through PATs (roadmap item: github.com/github/roadmap/issues/360) Hope it helps! Stay tuned at GItHub Changelog/Authentication for updates (github.blog/changelog/label/authentication/)

[@ericsuzuki8966]

Hey Marcio, I wanted to ask if the contributions you make to your organization's private repositories through your EMUser account be shown in your personal profile page. Is there a way to make every commit/issue made through the EMU display on your personal Github profile?

[@martedesco]

Hey Eric! EMU user accounts cannot be linked to a GitHub user account. They are accounts provisioned straight from the IdP and have only read access to public repos in GitHub.com. Hope it helps! Happy holidays.

[@user-gl4ye4sh2k]

hi Marcio, I am facing the issue, lets say I don't use EMU and provision saml and scim , now creating a scim user sends the invite but now after the invite is sent I dont get the chance to know about the username and its a problem for me as I want to do access management using the GitHub apis, but they require the username

[@martedesco]

Hey there, Indeed using SCIM will invite a user to either create a GitHub account or to link to an existing one. EMUs allow to provision users straight from your identity provider and might be worth considering for your use case.

[@Rmksung]

Hey Marcio, thank you very much for the video. I have a quick question. I created an enterprise account, created an organization, connected it to Azure AD for SSO/SAML, and activated auto-provisioning. I want to invite users into the organization, but I want to automate creating an account for them. Is it possible? One document states personal accounts cannot be made for them. One doc says an enterprise-managed user account can be created/managed by the enterprise admin. Appreciate your help!

[@martedesco]

Hey! Glad that you find it helpful! User-provisioning via SCIM for an organization that belongs to a non-EMUs enterprise account won't create accounts for the user - it will send an invitation for users to join GitHub or link to an existing GitHub account. On EMUs, user-provisioning is configured at the enterprise level and it does create user accounts - that's one of the key features of EMUs. The accounts provisioned will be managed by your IdP from where you can control the whole user management lifecycle of the GitHub user accounts. Hope it helps! Happy holidays.

[@jaiderariza1292]

Hi Marcio, is the user in EMU counted as Github Enterprise user and have to pay for each user like $21/mo? or not since is not really a github user?

[@martedesco]

Hi Jaider, The same price applies. More information about pricing can be found at github.com/pricing . Enterprise Managed Users is under GitHub Enterprise plan.