News for hackers. Stuff that matters.
Re:Atlassian prepares to abandon on-prem server products by gwright on Monday October 16, 2023 @11:03AM (#37900790)
Has anyone identified an easy/feasible way to add SSO authentication to github pages?
Re:Atlassian prepares to abandon on-prem server products by spondylosaurus on Monday October 16, 2023 @11:34AM (#37901278)
https://www.twilio.com/blog/keep-internal-docs-secure-okta-n...

This is one, although you'll need to use Netlify instead of GitHub Pages proper.

Re:Atlassian prepares to abandon on-prem server products by kosikond on Monday October 16, 2023 @11:45AM (#37901492)
OTOH couldn't it be done with Cloudflare Zero Trust ?

Have the GH Pages (sub)domain proxied with CF, protect the URL with Zero Trust, for SSO itself there are several IdP available [0]. First 50 users are not billed.

[0]https://developers.cloudflare.com/cloudflare-one/identity/id...

Re:Atlassian prepares to abandon on-prem server products by TheNewsIsHere on Monday October 16, 2023 @04:30PM (#37906098)
I haven’t tried doing this, although I’ve thought of it to solve a similar problem, which I ultimately solved by not bothering and just letting GitHub render the docs. (Purely internal technical use cases, so not an issue.)

I haven’t experimented, but my first attack would be to query the GH Pages service directly and specify the host header. Bypass Cloudflare entirely.

GitHub Pages supports SSO with the enterprise cloud plan, of course.

Re:Atlassian prepares to abandon on-prem server products by kriberg on Monday October 16, 2023 @12:44PM (#37902541)
We use azure ad for authn to our github organization. That also covers github pages generated from those repos.
Re:Atlassian prepares to abandon on-prem server products by gwright on Thursday October 19, 2023 @08:01AM (#37941681)
I assume that means that every person accessing the pages also needs a github account? I don't mind a requirement for a github account for anyone contributing to the repo but I would like authenticated access for viewing the pages that doesn't require a Github account.