This section describes how to integrate Microsoft Github with RSA Cloud Authentication Service using My Page SSO.

Configure RSA Cloud Authentication Service

Perform these steps to configure RSA Cloud Authentication Service using My Page SSO.

Procedure 

1. Sign in to RSA Cloud Administration Console and browse to Applications > Application Catalog.
2. Click Create from Template and then click the Select button next to SAML Direct.

3. Choose Cloud on the Basic Information page.
4. Enter the name for the application and click the Next Step button.

5. On the Connection Profile page, Navigate to Initiate SAML Workflow section and choose IdP-initiated.
6. Scroll down to the Service Provider section and provide its details in the following format:
   1. Assertion Consumer Service (ACS) URL: https://github.com/enterprises/<enterprise-url-slug>/saml/consume
   2. Audience (Service Provider Entity ID): https://github.com/enterprises/<enterprise- url-slug>

7. In the Identity Provider section, take note of the Identity Provider URL, as this value will be required later in the Microsoft GitHub configuration.

8. Under the Message Protection section, choose IdP signs assertion within response.
9. Download the certificate by clicking Download Certificate.

10. In the User Identity section, select Identifier Type as unspecified and Property as mail.
11. Click Next Step.
12. On the User Access page, choose the access policy you want to use to determine which users can access the application, then click Next Step.

13. On the Portal Display page, configure the portal display and other settings. Then click Next Step.
14. On the Fulfillment page, configure your preferred settings or leave the Fulfillment toggle button disabled as it is, then click Save and Finish.
15. Locate the application just created in My Applications page and click the dropdown arrow next to Edit > Export Metadata.
16. Click Publish Changes and wait for the operation to be completed.

17. After publishing, your application is now enabled for SSO. 

The configuration is complete. 

Configure Microsoft Github

Perform these steps to configure Microsoft Github.

Pre-requisites 

1. Before configuring Microsoft GitHub, start by signing up for GitHub Enterprise Cloud and creating your enterprise account.
2. Ensure you select Enterprise with managed users option when setting up your GitHub Enterprise Cloud account.

3. After selecting Enterprise with managed users, you’ll be prompted to enter details about your GitHub Enterprise Cloud.
   1. Enterprise name: Provide a name of your choice for the enterprise.
   2. Enterprise URL slug: Enter a custom URL slug for your enterprise (The enterprise URL will appear as: https://github.com/enterprises/your-slug).
   3. Username shortcode: Enter a shortcode to be used in member usernames (e.g., usernames will appear as username_rsapelab).
   4. Industry: Select the industry that best represents the primary focus or purpose of this enterprise.
   5. Number of employees: Choose the employee range that this enterprise is intended to support.
   6. Country/Region: Choose the country and region where your enterprise is based.
   7. Identity Provider: Choose Custom or other.

4. You will then be prompted to enter an enterprise account as an admin to manage the GitHub Enterprise Cloud configuration.
5. After that, you will receive an email with your admin username and be prompted to set up your identity provider.

Procedure

1. Log in to GitHub enterprise cloud as an admin: https://github.com/login.
2. Click the Identity Provider tab at the top. 

3. In the Single sign-on configuration section, under SAML single sign-on, click Add SAML Configuration.

4. Under SAML Single Sign-On, enter all the required details in the following format:
   1. Sign-on URL: This is the Identity Provider URL previously obtained from the RSA Cloud Authentication Service configuration.
   2. Issuer: This is the Identity Provider URL previously obtained from the RSA Cloud Authentication Service configuration.
   3. Public certificate: Upload the certificate downloaded from RSA Cloud Authentication Service.

5. Click Test SAML Configuration to verify the setup. Upon successful testing, you will receive confirmation, after which you can click Save SAML Settings.

6. After that, you will be redirected to a page displaying recovery codes. You will have the option to download, print, or copy them in case you ever get locked out and can't sign in.
7. Click on Enable SAML authentication.

8. Go to the Identity Provider tab, where you will now see that SAML Single Sign-On is enabled. 

Test Application

1. Enter your username or email address in the text field, and the option to Sign in with your identity provider will be displayed.

2. You will then be prompted to confirm that you will authenticate your account by signing in through your enterprise's Single Sign-On (SSO) provider.

Notes

1. After enabling SAML authentication, all members of your enterprise must use Single Sign-On (SSO) with your configured Identity Provider (IdP) to access any of the enterprise's organizations. This means that all organizations within the enterprise will be authenticated through the configured IdP.
2. The ACS URL can be obtained from the Microsoft GitHub configuration during the SAML Single Sign-On setup.
3. Entity ID can be obtained from the ACS URL by removing /saml/consume from the URL.     

The configuration is complete.