GitHub Enterprise Adds Automated SSO Authorization for PATs and SSH Keys
GitHub Enterprise Cloud now allows enterprise administrators to automate SSO authorization for classic personal access tokens (PATs) and SSH keys. This new capability replaces the previous manual, per-organization authorization process, significantly reducing operational friction and overhead. Administrators can opt-in to a new enterprise setting to delegate credential authorization through GitHub Apps, which can then use a new API to bulk-authorize up to 50 organizations in a single request. This is particularly beneficial for managing service accounts and automation credentials across numerous SSO-protected organizations, promoting better security practices by enabling easier token rotation.
Features (1) ›
- Automated SSO Authorization for Classic PATs and SSH Keys
GitHub Enterprise Cloud now allows enterprise admins to automate SSO authorization for existing classic PATs and SSH keys via a new API and GitHub Apps. This capability replaces manual per-organization authorization, enabling bulk authorization across up to 50 organizations to reduce operational overhead and support credential rotation without exposing secrets.
https://github.blog/changelog/2026-09-16-automate-sso-authorization-for-classic-pats-and-ssh-keys
Related releases
- SCIM User Responses Now Include profileUrl Attribute GitHub Changelog ·
- GitHub Copilot now offers budget increase requests GitHub Changelog ·
- Code scanning AI Scan no longer requires CodeQL default setup GitHub Changelog ·
- Enterprise Admins Can Now Enforce GitHub Advanced Security Configurations GitHub Changelog ·
- GitHub Copilot suggests custom repository property definitions GitHub Changelog ·
- GitHub confirms SHA-1 in HTTPS sunset for github.com and Enterprise Cloud GitHub Changelog ·