Edit

Configure your App Service or Azure Functions app to use GitHub login

  • Article

This article shows how to configure Azure App Service or Azure Functions to use GitHub as an authentication provider.

To complete the procedure in this article, you need a GitHub account. To create a new GitHub account, go to GitHub.

Register your application with GitHub

  1. Sign in to the Azure portal and go to your application. Copy your URL. You'll use it to configure your GitHub app.

  2. Follow the instructions for creating an OAuth app on GitHub. In the Authorization callback URL section, enter the HTTPS URL of your app and append the path /.auth/login/github/callback. For example, https://contoso.azurewebsites.net/.auth/login/github/callback.

  3. On the application page, make note of the Client ID, which you will need later.

  4. Under Client Secrets, select Generate a new client secret.

  5. Make note of the client secret value, which you will need later.

    Important

    The client secret is an important security credential. Do not share this secret with anyone or distribute it with your app.

Add GitHub information to your application

  1. Sign in to the Azure portal and navigate to your app.

  2. Select Authentication in the menu on the left. Click Add identity provider.

  3. Select GitHub in the identity provider dropdown. Paste in the Client ID and Client secret values that you obtained previously.

    The secret will be stored as a slot-sticky application setting named GITHUB_PROVIDER_AUTHENTICATION_SECRET. You can update that setting later to use Key Vault references if you wish to manage the secret in Azure Key Vault.

  4. If this is the first identity provider configured for the application, you will also be prompted with an App Service authentication settings section. Otherwise, you may move on to the next step.

    These options determine how your application responds to unauthenticated requests, and the default selections will redirect all requests to log in with this new provider. You can change customize this behavior now or adjust these settings later from the main Authentication screen by choosing Edit next to Authentication settings. To learn more about these options, see Authentication flow.

  5. Click Add.

You're now ready to use GitHub for authentication in your app. The provider will be listed on the Authentication screen. From there, you can edit or delete this provider configuration.