GitHub

Managed just-in-time access for GitHub organization teams

This page documents how to install P0 to a GitHub organization, allowing you to use P0 to manage access to teams within that organization. Users can request temporary access to a team, and P0 will automatically manage adding users to that team, and removing users when their access expires.

Prerequisites

• GitHub organization.

• Permission to install GitHub apps to that organization.

• An Okta directory listing integration must already be installed.

  • The Okta directory is used to map your users to their GitHub usernames.

  • Okta directory is currently the only supported mechanism for this.

Set up the GitHub integration

Currently, P0 can only be installed to a single GitHub organization at a time.

1. Open the P0 dashboard at p0.app and log in to your org.

2. In the sidebar, click Integrations. Under Resources, click GitHub.

3. Click the Install integration button. You will be redirected to GitHub's website.

4. On the selector page, select the GitHub organization to install P0 in.

   1. You must select an organization. Selecting a user will result in an error.

5. Review the permissions required by the P0 GitHub app and select Install.

   1. GitHub may require you to authenticate to authorize the installation

6. After a moment, you will be redirected back to the P0 dashboard and shown a "Finish installation" page. Here, enter the name of the user profile attribute in Okta where P0 should look up users' GitHub usernames.

   1. The attribute must exist on the default user profile

   2. The attribute must be of type string

   3. The attribute should not be user-editable

7. Click Finish install to save the configuration.

Congratulations! You have successfully set-up GitHub for P0. You can return to the GitHub integration page at any time to change the integration configuration.