Live-share: Sign in using GitHub Enterprise or ADFS Account

[MichaelAndCara]

Request

Not sure if it's already in the works, but will it be possible to sign in using a GitHub enterprise account, which is wired to our AD credentials?

Product and Version [VS/VSCode]: VSCode 1.22.2
OS Version [macOS/Windows]: Windows 10
Live Share Extension Version: 0.3.93
Target Platform or Language [e.g. Node.js]: any

Steps to Reproduce / Scenario:

1. Sign In
2. Choose github

[Chuxel]

@MichaelAndCara Thanks for asking. If your organization uses Azure AD, you can sign into that account using the "Microsoft" path. We support AAD and personal Microsoft accounts. However, we do not support on-prem ADFS or on-prem GitHub. Does that meet your need?

[MichaelAndCara]

Our organization does not use AADs, but Devs do have Microsoft accounts, which we can use.

However, our employees in our IT department are guaranteed to have a "normal" AD account. I figured if we were mentoring anyone (employees interested in becoming developers, interns, etc), it would be convenient to use our GitHub enterprise account that is tied to our "normal" AD accounts.

Thanks @Chuxel

[Chuxel]

@MichaelAndCara Got it. I'll flip this to a feature request given it sounds like in an ideal world you'd be able to use on-prem AD.

[HenryHW]

Really need the on-prem AD feature. Most of the environments I work in don't allow any Azure access.
All Azure access is done on a separate network.

[spkane]

Github Enterprise support would be great.

[AshworthHub]

We would love to use this in our organization but require github enterprise support.

[lostintangent]

@spkane @AshworthHub Out of curiosity: would on-prem AD support address your needs? Or would you specifically need GitHub Enterprise authentication?

[AshworthHub]

@lostintangent we would need github enterprise.

[spkane]

@lostintangent Github Enterprise support. We are not a Windows shop, so AD support would not help us, but we do use GHE internally.

I would not expect this to be difficult, since as far as I know, it has all the same APIs. They usually just have a different base URL.

[mezafits]

This would be nice to have as an on prem solution, perhaps TFS integration?

[legomushroom]

cc @avanderhoorn

[Garen]

Suggest splitting this into two issues - I'm only interested in local AD support. (Some Github Enterprise users use it with AD, others don't).

[CalPolyRock]

Agree simple ad/ldap is all we need too.
We'll never do github enterprise since we have on prem Atlassian stack.

[Arshia001]

Also need this.

[louisfischer]

Need this also

[MichaelSteinecke]

In our company, we're developing in an completely disconnected environment with On Premise TFS and On Premise AD. So, on-prem ADFS is a must.

[RobFur]

We are also developing in a completely disconnected environment and on-prem ADFS is also a must for us.

[zhaoshouren]

would be interested in an on premise solution for organizations with restricted external network access.

[allendcr]

One more for "totally disconnected environment" - LiveShare would be huge for us but t's currently DOA

[BenBurge]

This feature for Live Share will be used by a lot of DoD contractors and government. Many times we are on offline networks for security reasons. The market for On-Premise is very large with governments.

[maximedasilva]

Hi,
Does anyone have an update on this issue ? With the covid-19 out there, it would be very interesting for us to collaborate with this tool !
Thanks !

[NicolasVargas]

Sure !
I'm working in a company relied to the french ministry of labour and, of course, we rely on ADFS Accounts. Live Share would be a really nice tool to use !
Thanks

[viralatron]

Same here, due to privacy and security reasons we can't use GHE, regular Github os Azure AD.

[JamesCatt]

Also could really use this due to CoVID-19. Can't use without either Github Enterprise or on-premise AD.

[tebeco]

this would be great indeed, even if it means "only direct mode"

[malghabr]

Support, an on premise solution with AD would greatly be appreciated.

[dankelley2]

+1 for an on-prem solution. Our windows based Dev team would love to use this but cannot have offsite authentication.

[rpetersen3]

If we could restrict live-share to our O365 tenant or our github enterprise oauth it would be a huge win for our developers working from home. With COVID-19 and our working from home situation this enhancement cannot come fast enough!

[lostintangent]

@rpetersen3 If you were able to use the existing Azure Active Directory-based auth, and just needed a way to restrict collaboration to members of your tenant, you could take a look at using this extension and see if it meets your needs in the near-term? That handles automatically blocking guests that are external to the host’s domain.

[rpetersen3]

Thanks, we will give it a try!

On Mon, May 18, 2020 at 10:09 AM Jonathan Carter [e-mail]
wrote:

@rpetersen3 https://github.com/rpetersen3 If you were able to use the
existing Azure Active Directory-based auth, and just needed a way to
restrict collaboration to members of your tenant, you could take a look at
using this extension
https://marketplace.visualstudio.com/items?itemName=vsls-contrib.gatekeeper
and see if meets your needs in the near-term? That handles automatically
blocking guests that are external to the host’s domain.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/live-share/issues/341#issuecomment-630207234,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AHG63PKAF3AHO743KXZMMVLRSE6RRANCNFSM4E7C7JZQ
.

[mmodrow]

I'm also in an environment, where MS-Logins are a no-go and we use on-prem AD with on-prem Azure Devops. Given this pandemic it would be hugely appreciated to use VS-Code+LiveShare through on-prem-means instead of sharing full screens behind a remote desktop through a VPN.

[lateo-net]

One more asking for a "local AD/LDAP login" feature suitable for isolated networks.
Help us bring some fresh stuff in those forever-away-from-internet-networks.
A hacky way is an okay way.