docs/content/authentication/authenticating-with-single-sign-on/authorizing-an-ssh-key-for-use-with-single-sign-on.md

title, intro, redirect_from, versions, topics, shortTitle

title	intro	redirect_from	versions	topics	shortTitle
Authorizing an SSH key for use with single sign-on	To use an SSH key with an organization that uses single sign-on (SSO), you must first authorize the key.	/articles/authorizing-an-ssh-key-for-use-with-a-saml-single-sign-on-organization /articles/authorizing-an-ssh-key-for-use-with-saml-single-sign-on /github/authenticating-to-github/authorizing-an-ssh-key-for-use-with-saml-single-sign-on /github/authenticating-to-github/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on /authentication/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on	ghec *	SSO	SSH Key with SSO

About authorization of SSH keys

You can authorize an existing SSH key, or create a new SSH key and then authorize it. For more information about creating a new SSH key, see AUTOTITLE.

{% data reusables.saml.must-authorize-linked-identity %}

{% data reusables.saml.authorized-creds-info %}

Note

If your SSH key authorization is revoked by an organization, you will not be able to reauthorize the same key. You will need to create a new SSH key and authorize it. For more information about creating a new SSH key, see AUTOTITLE.

You do not need to authorize SSH certificates signed by your organization's SSH certificate authority (CA).

Authorizing an SSH key

{% data reusables.user-settings.access_settings %} {% data reusables.user-settings.ssh %}

1. To the right of the SSH key you'd like to authorize, click Configure SSO. {% data reusables.saml.authenticate-with-saml-at-least-once %}

   

2. In the dropdown menu, to the right of the organization you'd like to authorize the SSH key for, click Authorize.

Note

When authorizing an SSH key for use within an organization that belongs to an enterprise which has both an IP allow list and single sign-on enabled at the enterprise level, your IP must also be allowed at the enterprise level. See AUTOTITLE.

Further reading

• AUTOTITLE
• AUTOTITLE