Part 1 – Configuration on LastPass Dashboard
  • Open the LastPass Admin Dashboard. Select “Applications” from the left side menu and then select “Web App” from the submenu.

LastPass Web Applications

 

  • Click on “+ Add SSO App” button from the upper right corner.

Add SSO application

 

  • A pop-up window will appear. Under the section: “Select your app”, click on “Search…” and type GitHub to search the LastPass Catalog. Select GitHub from the drop-down menu.

SSO App Catalog

 

  • Under the section: “Identity Provider”, you will find the required information such as “Entity ID”, “SSO End Point”, and “Logout URL”. Also, you can download the LastPass Metadata xml or Certificate file to your computer by clicking on the download arrow button next to “Metadata” or “Certificate”.

SSO Identity Provider

 

Part 2 – Configuration on Github Enterprise 
  • Click on Your profile in the top right corner.
  • Select the icon for your organization and then click on “Setting“.
  • Click on “Security“.
  • Under SAML single sign-on, select “Enable SAML authentication“.
  • Open your Github admin account and select “Authentication”.
  • Enter the information as follows:
    Sign On URL: SSO Endpoint copied from LastPass dashboard
    Issuer: https://identity.lastpass.com/
    Public Certificate: upload the certificate you downloaded in part 1.
  • Scroll all the way down and save changes.
  • Click on the pen icon and then choose “SHA1” from the drop-downs menu
  • click on “Test SAML configuration” to check your configuration.
  • You have the option to select “Require SAML SSO authentication for all members of the organization name organization” or allow login without SAML.
  • Click on “Save“.

For more info: visit GitHub Help Center.

Part 3 – Finalizing SSO Configuration
  • Expand the SP section, paste the following URL  in the ACS URL text box:
    http(s)://[hostname]/saml/consume
  • Click on “Save”.

SSO app Service Provider

 

GitHub is now configured! At this point, you can assign users to GitHub. Please see the Assign Users page for instructions.