SSO AuthenticationSocial Login

GitHub

Set up "Sign in with GitHub" OAuth login for your Safeguard tenant.

In GitHub, go to Settings → Developer settings → OAuth Apps → New OAuth App (for a GitHub organization, use the organization's own Developer settings instead).
Set Authorization callback URL to the Callback URL.
Click Register application, then Generate a new client secret.
In Safeguard, click Add Provider → GitHub, paste in the Client ID and generated Client Secret, and Save.

Example values

Dummy values illustrating the shape — use the real ones from your GitHub OAuth App.

Field	Example value
Authorization callback URL (register in GitHub)	`https://api.safeguard.sh/auth/api/v1/sso/callback`
Client ID (paste into Safeguard)	`Iv1.abcdef1234567890`
Client Secret (paste into Safeguard)	`ghs_xxxxxxxxxxxx`

Microsoft

Set up "Sign in with Microsoft" OAuth login for your Safeguard tenant.

Provisioning Policy

Control what happens on first SSO login and whether password login stays available.