Integration Guide: GitHub Enterprise

Overview

The GitHub Enterprise integration connects Tello IAM to your GitHub Enterprise Managed Users (EMU) organization using SCIM provisioning. The connection requires an Enterprise Slug and a SCIM API Token generated from the enterprise setup user account.

Before connecting

The Administrator completing this setup must have access to the GitHub Enterprise setup user account ({SHORTCODE}_admin). SCIM provisioning must be enabled in GitHub Enterprise before the connection can be established.

Step 1: Locate your Enterprise Slug

The Enterprise Slug is the shortcode from your EMU setup user. For example, if your setup user is mycompany_admin, the Enterprise Slug is mycompany. Copy this value.

Step 2: Enable SCIM and generate a SCIM API Token

1. Sign in to GitHub as the enterprise setup user ({SHORTCODE}_admin).
2. Navigate to Enterprise Settings → Identity provider → Single sign-on configuration.
3. Enable Open SCIM configuration.
4. Navigate to the setup user’s account settings and select Developer settings → Personal access tokens → Tokens (classic).
5. Select Generate new token (classic).
6. Enter a name for the token and set the expiration. GitHub recommends no expiration date for SCIM tokens.
7. Under Scopes, select scim:enterprise.
8. Select Generate token and copy the token immediately. It will only be displayed once.

Important: The SCIM API Token must be generated from the enterprise setup user account ({SHORTCODE}_admin), not a standard user account. Copy the token before leaving the page — it will not be shown again.

Step 3: Connect GitHub Enterprise in Tello IAM

1. Navigate to Integrations in the left navigation.
2. Select + Add Integration.
3. Search for GitHub Enterprise and select Add.
4. Enter your Enterprise Slug in the Enterprise Slug field.
5. Enter the SCIM API Token in the SCIM API Token field.
6. Select Test Connection to verify both values are valid. A Connection successful confirmation will appear if accepted.
7. Select Connect. The integration appears on the Integrations page and an initial sync begins automatically.

Verify the connection

After the initial sync completes, confirm the following on the Integrations page:

• The GitHub Enterprise integration displays a status of Active
• A sync timestamp is present and reflects the completed sync
• User records on the Users page display detected GitHub permissions in the Access column

Reauthorizing the connection

If the GitHub Enterprise integration loses authorization, it will display an error on the Integrations page. To reauthorize, generate a new SCIM API Token from the enterprise setup user account, then select the integration row in Tello IAM, select Configure, and enter the new token.

Related articles

• Configuring Integrations — manage sync schedules, drift detection, and integration settings
• Understanding Errors — resolve integration errors and authorization failures