Fortinet white logo
Fortinet white logo

GitHub Connector

1.0.0

GitHub Connector

GitHub Connector

Category

  • Developer Platforms

Connection Method

  • OAuth
  • Service Account

Supported SSOs for connection

  • Okta
  • Azure

Data Collected

  • Misconfigurations
  • 3rd Party Applications
  • Identities
  • Activities

Integration Guide

Intro

Use this guide to add GitHub as a secured SaaS application in FortiCASB-SSPM SaaS Security platform.

Part A: Authorize FortiCASB-SSPM GitHub app

  1. Login to GitHub as an organization owner and open https://github.com/apps/FortiCASB-SSPM-ai/installations/new/

  2. Select the organization where you want to install FortiCASB-SSPM app.

  3. Choose "All repositories" and click "Install & Authorize".

  4. Open GitHub organization settings to identify the installation-id, the URL looks like https://github.com/organizations//settings/installations (replace org-name), click configure next to FortiCASB-SSPM app, the URL looks like https://github.com/organizations//settings/installations/, keep the installation-id for later.

Part B: Create a GitHub account

  1. Create a new user for GitHub that will be used as a service account. This user must be an "Owner" (and associated to the selected organization). It is possible (but not recommended) that a current "Owner" will serve as the service account. Notice that a TOTP secret will have to be generated and saved for the connection phase.

  2. Click on GitHub from the "App Store" tab on the Applications page

  3. Insert the new user details that were created and the installation-id

  4. To enable Two-factor for this account, please follow "Enable Two Factor" manual (specified in part C)

  5. To enable the "Activities" collection, check the checkbox (notice - an enterprise license is required)

  6. Click Next

  7. If the organization has SSO (not mandatory), choose the SSO provider and fill in the SSO username, password and TOTP secret (click on Generate to validate that the TOTP secret is correct).

  8. Click Connect.

Part C: Enable Two Factor Manual

  1. On FortiCASB-SSPM adding new application select "Two-factor Enabled" checkbox

  2. Go to https://github.com/settings/two_factor_authentication/setup/intro

  3. Login with the service account you created

  4. Choose "Set up using an app" and click Continue

  5. On "Authentication verification" click on "enter this text code"

  6. Copy the "two-factor secret" into the OTP secret in the FortiCASB-SSPM GitHub application screen and click Next

  7. You will receive a 6-digit code from FortiCASB-SSPM, and paste it on GitHub in "Enter the code from the application" input field. Click Continue to complete the Two-factor process

  8. On the FortiCASB-SSPM GitHub application click "Connect" to complete the connection.


That's it! You're all set.

Your SaaS security is our priority!

The FortiCASB-SSPM team

Previous
Next

GitHub Connector

GitHub Connector

Category

Connection Method

Supported SSOs for connection

Data Collected

Integration Guide

Intro

Use this guide to add GitHub as a secured SaaS application in FortiCASB-SSPM SaaS Security platform.

Part A: Authorize FortiCASB-SSPM GitHub app

  1. Login to GitHub as an organization owner and open https://github.com/apps/FortiCASB-SSPM-ai/installations/new/

  2. Select the organization where you want to install FortiCASB-SSPM app.

  3. Choose "All repositories" and click "Install & Authorize".

  4. Open GitHub organization settings to identify the installation-id, the URL looks like https://github.com/organizations//settings/installations (replace org-name), click configure next to FortiCASB-SSPM app, the URL looks like https://github.com/organizations//settings/installations/, keep the installation-id for later.

Part B: Create a GitHub account

  1. Create a new user for GitHub that will be used as a service account. This user must be an "Owner" (and associated to the selected organization). It is possible (but not recommended) that a current "Owner" will serve as the service account. Notice that a TOTP secret will have to be generated and saved for the connection phase.

  2. Click on GitHub from the "App Store" tab on the Applications page

  3. Insert the new user details that were created and the installation-id

  4. To enable Two-factor for this account, please follow "Enable Two Factor" manual (specified in part C)

  5. To enable the "Activities" collection, check the checkbox (notice - an enterprise license is required)

  6. Click Next

  7. If the organization has SSO (not mandatory), choose the SSO provider and fill in the SSO username, password and TOTP secret (click on Generate to validate that the TOTP secret is correct).

  8. Click Connect.

Part C: Enable Two Factor Manual

  1. On FortiCASB-SSPM adding new application select "Two-factor Enabled" checkbox

  2. Go to https://github.com/settings/two_factor_authentication/setup/intro

  3. Login with the service account you created

  4. Choose "Set up using an app" and click Continue

  5. On "Authentication verification" click on "enter this text code"

  6. Copy the "two-factor secret" into the OTP secret in the FortiCASB-SSPM GitHub application screen and click Next

  7. You will receive a 6-digit code from FortiCASB-SSPM, and paste it on GitHub in "Enter the code from the application" input field. Click Continue to complete the Two-factor process

  8. On the FortiCASB-SSPM GitHub application click "Connect" to complete the connection.


That's it! You're all set.

Your SaaS security is our priority!

The FortiCASB-SSPM team

Previous
Next