github GitHub Changelog ·

GitHub Enterprise Adds Automated SSO Authorization for PATs and SSH Keys

securitygaengineer
feature

GitHub Enterprise Cloud now allows enterprise administrators to automate SSO authorization for classic personal access tokens (PATs) and SSH keys. This new capability replaces the previous manual, per-organization authorization process, significantly reducing operational friction and overhead. Administrators can opt-in to a new enterprise setting to delegate credential authorization through GitHub Apps, which can then use a new API to bulk-authorize up to 50 organizations in a single request. This is particularly beneficial for managing service accounts and automation credentials across numerous SSO-protected organizations, promoting better security practices by enabling easier token rotation.

Features (1)
  • Automated SSO Authorization for Classic PATs and SSH Keys

    GitHub Enterprise Cloud now allows enterprise admins to automate SSO authorization for existing classic PATs and SSH keys via a new API and GitHub Apps. This capability replaces manual per-organization authorization, enabling bulk authorization across up to 50 organizations to reduce operational overhead and support credential rotation without exposing secrets.

Read the original announcement →

https://github.blog/changelog/2026-09-16-automate-sso-authorization-for-classic-pats-and-ssh-keys

Related releases