Skip to content

Commit 745a7ff

Browse files
N-UshaCopilotmchammer01
authored
Enhance access restriction guidelines for multiple enterprises (#57793)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: mchammer01 <42146119+mchammer01@users.noreply.github.com>
1 parent 60ecb15 commit 745a7ff

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

content/admin/configuring-settings/hardening-security-for-your-enterprise/restricting-access-to-githubcom-using-a-corporate-proxy.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,21 @@ This will prevent people on your network from accessing these endpoints with use
6161

6262
>[!NOTE] Access to `github.com/login` is required to create support tickets. To ensure users with support entitlements can request help, you may want to exempt these users from the restriction.
6363
64+
## Enabling access restrictions for multiple enterprises
65+
66+
Enterprise owners can enforce the restriction across multiple enterprise accounts.
67+
68+
1. Enable the feature for each enterprise account. See [Enabling access restrictions](#enabling-access-restrictions).
69+
1. Inject a header into all traffic going to certain supported endpoints. The header is in the following format.
70+
71+
```text
72+
sec-GitHub-allowed-enterprise: ENTERPRISE1-ID, ENTERPRISE2-ID, ENTERPRISE3-ID ... ENTERPRISE20-ID.
73+
```
74+
75+
Enterprise owners can find the correct enterprise ID to use in the header for each of the enterprises. See [Finding the header](#finding-the-header).
76+
77+
> [!NOTE] We currently support up to 20 unique enterprise IDs to be included in the header.
78+
6479
### Lifting the restriction for certain users
6580

6681
You may want to lift the restriction for certain users who need to contribute to open source resources using a personal account, or who may need to create support tickets in case of issues. To handle this, you must configure your network to inject the header only for users that you intend to restrict.

0 commit comments

Comments
 (0)