lindluni/Okta to GitHub Enterprise User Sync
Removes GitHub Enterprise members whose verified domain emails are not present in the configured Okta groups.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| enterprise | GitHub Enterprise slug (e.g. "my-enterprise"). | yes | — |
| github-token | GitHub token with enterprise:admin scope (PAT or app token). | yes | — |
| okta-domain | Okta domain, e.g. "example.okta.com" (no scheme). | yes | — |
| okta-token | Okta API token used to list group members. | yes | — |
| okta-groups | Newline- or comma-separated list of Okta group IDs whose members are the source of truth. | yes | — |
| dry-run | If "true" (default), report removals without performing them. | no | true |
| email-domain-filter | Optional comma-separated list of email domains to consider when matching (others are ignored). | no | "" |
Outputs
| name | description |
|---|---|
| removed-count | Number of users removed (or that would be removed in dry-run). |
| removed-logins | JSON array of GitHub logins that were removed (or would be). |
| drift-spared-logins | JSON array of GitHub logins spared from removal because a re-check found them in Okta. |