# GitHub Auth Module

This authentication module lets users log in to YouTrack with their GitHub or GitHub Enterprise accounts.

> **Note:**
> When a user created manually in YouTrack logs on with GitHub for the first time, YouTrack ties the GitHub user to the existing YouTrack user if a matching email address, username, or login is found. If no match is found, a new account for the GitHub user is created in YouTrack.

## Enable GitHub Authentication

To let users log in to YouTrack with existing GitHub accounts, create and enable the GitHub authentication module.

Procedure: To create a GitHub authentication module:

> **Tip:**
> Requires permissions: Low-level Admin Write

1. From the main navigation menu, select ![](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/settings.svg) `Administration > Access Management > Auth Modules`.

2. Click the New module button.

* The Select an identity provider dialog opens. ![Select an identity provider dialog listing available authentication services.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/select-idp.png)

3. In the Select an identity provider dialog, select GitHub.

* The Configure Login with GitHub wizard opens.

4. Enter the URL of your GitHub server, then click Next.

![Wizard step for GitHub server URL with the corresponding configuration fields displayed.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/github-wizard-1.png)

* For GitHub.com, enter `https://github.com`.

* For GitHub Enterprise Server, enter the base URL of your GitHub Enterprise Server instance.

5. Copy the generated Redirect URI.

![Wizard step with the GitHub redirect URI.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/github-wizard-2.png)

* Sign in to GitHub.

* Start [creating an OAuth app](https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/creating-an-oauth-app).

* Paste the copied redirect URI into the Authorization callback URL field.

* Save the new OAuth app.

When finished, click Next in YouTrack.

> **Note:**
> Make sure to update the redirect URI in GitHub when you change the base URL of your YouTrack instance, for example after changing proxy settings.

6. Copy the Client ID and Client secret from your GitHub OAuth app and paste them into the corresponding fields in YouTrack.

![Wizard step for Client ID and Client secret with the corresponding configuration fields displayed.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/github-wizard-3.png)

7. Click Finish.

The GitHub authentication module is created and its configuration page opens.

Procedure: To enable the GitHub auth module:

> **Tip:**
> Requires permissions: Low-level Admin Write

1. Review and configure optional settings for the authentication module. For more information, see [General Settings](#github-settings) and [Additional Settings](#github-additional-settings).

2. Click Save to apply the settings.

3. Click Enable:

* The GitHub authentication module is enabled.

* The GitHub auth module icon is added to the login dialog window. Users can click this icon to log in to YouTrack with their GitHub accounts.

4. To verify that the authentication module is configured correctly, click Test login.

* YouTrack opens the GitHub authentication flow.

* If you are authenticated successfully, the configuration is correct.

### Authorize the GitHub OAuth Application

> **Note:**
> This step is only required when using an account that belongs to an organization in GitHub or when using the Allowed organizations to restrict logins to users who belong to specific organizations.

The first time you attempt to log in using the GitHub authentication module, you are prompted to authorize access to the OAuth application in GitHub.

![Prompt to authorize the GitHub OAuth application.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/authorize-github-oath-app.png)

If you are unable to grant the application access at this point in time, access the settings for your organization and grant them there. For specific instructions, please refer to the [GitHub documentation](https://docs.github.com/en/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization).

## General Information

In the header of the settings page, you can find the general information about the authentication module.

| Setting | Description |
| --- | --- |
| Name | Stores the name of the authentication module. Use this setting to distinguish this module from other authentication modules in the Auth Modules list.     You can change the name and icon of the authentication module using the Rename action. For more details, see [Actions](#auth-module-actions).   |
| Type | Displays the type of authorization service that is enabled for third-party authentication in YouTrack. |
| Server | Displays the GitHub server URL used by this authentication module. |
| Accounts imported to YouTrack | Displays the number of users that have been imported to YouTrack. |

## Actions

The following actions are available in the header:

| Action | Description |
| --- | --- |
| Enable | Enables the authentication module.     This option is only shown when the authentication module is currently disabled.   |
| Disable | Disables the authentication module.     This option is only shown when the authentication module is currently enabled.   |
| Test login | Lets you test the connection with the authentication service. |
| Rename |    Lets you update the existing authentication module name and change its default icon.     You can find this action in the ![](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/more-options.svg) More options menu.    |
| Delete | Removes the authentication module from YouTrack. Use only when you have configured additional authentication modules that let users log into your YouTrack installation.     You can find this action in the ![](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/more-options.svg) More options menu.    |

## General Settings

On the General Settings tab, you find the general settings for the authentication module. This includes the redirect URI used to register YouTrack in GitHub and the client credentials generated in GitHub.

| Setting | Description |
| --- | --- |
| Default | Designates the authentication module as the default for your installation. Only one authentication module can be set as the default at any time. If another module is currently set as the default, that state is cleared.     If none of the available authentication modules are designated as the default, unauthenticated users are always directed to the YouTrack login page.   |

### Authentication

The Authentication settings define the core security credentials and parameters required to connect YouTrack with GitHub. By entering the Client ID and Client Secret generated in GitHub, and defining the required access Scopes, you enable secure identity verification. This section also displays the unique Redirect URI that must be registered in GitHub to authorize the connection.

| Setting | Description |
| --- | --- |
| Redirect URI | Displays the authorized redirect URI used to register the connection to YouTrack in GitHub. |
| Client ID | Stores the identifier GitHub uses to validate a login request. You generate this value in GitHub when you create the OAuth app. |
| Client Secret | Stores the secret used to validate the client ID. You generate this value in GitHub together with the client ID. |

### GitHub Server Settings

The settings in this section let you the operational parameters and access controls for the GitHub authentication module.

| Setting | Description |
| --- | --- |
| Server URL | Stores the URL of the GitHub server to which YouTrack sends login requests.  |
| Scope | Displays the scope for the access request. The default value is `user:email,read:org`.  |
| Allowed organizations | Restricts logins for this authentication module to users who belong to specific GitHub organizations. Enter a comma-separated list of organizations. If empty, any user with a GitHub account can log in using this authentication module. |

## Additional Settings

The settings on the Additional settings tab let you manage account creation and group membership and reduce the loss of processing resources consumed by idle connections.

| Setting | Description |
| --- | --- |
| User creation | Enables creation of YouTrack accounts for unregistered users who log in with an account that is stored in GitHub. YouTrack uses the email address to determine whether the user has an existing account. |
| Auto-join groups | Adds users to a group when they log in with an account that is stored in the connected authorization service. You can select one or more groups. New users that auto-join a group inherit all the permissions assigned to this group.     We recommend that you add users to at least one group. Otherwise, a new user is only granted the permissions that are currently assigned to the All Users group.   |
| Connection timeout | Sets the period of time to wait to establish a connection to GitHub. The default setting is 5000 milliseconds (5 seconds). Use 0 for an infinite timeout. |
| Read timeout | Sets the period of time to wait to read and retrieve user profile data from GitHub. The default setting is 5000 milliseconds (5 seconds). Use 0 for an infinite timeout. |
| Changes made to GitHub | Links to the Audit Events page in YouTrack. There, you can view changes that were applied to this authentication module. |