The GitHub integration allows your AI Agents to authenticate users with their GitHub accounts and access GitHub repositories and manage issues their behalf.

​
Overview

The GitHub integration is perfect for developer focused AI applications that need to interact with code repositories, manage issues, or automate development workflows. This integration provides access to both public and private repositories based on user permissions.

​
Configuration

1

Set up app in Github

  1. Sign up for a GitHub Developer account
  2. Set up an app using Box’s GitHub Developer Settings: OAuth Apps documentation
  3. Note your Client ID and Client Secret
2

Configure for Auth0

  1. Use the following settings when configuring your app:
  • Homepage URL: https://YOUR_DOMAIN
  • Authorization callback URL: https://YOUR_DOMAIN/login/callback
Find your Auth0 domain nameIf your Auth0 domain name is not shown above and you are not using our custom domains feature, your domain name is your tenant name, your regional subdomain (unless your tenant is in the US region and was created before June 2020), plus.auth0.com. For example, if your tenant name were exampleco-enterprises, your Auth0 domain name would be exampleco-enterprises.us.auth0.com and your redirect URI would be https://exampleco-enterprises.us.auth0.com/login/callback. (If your tenant is in the US and was created before June 2020, then your domain name would be https://exampleco-enterprises.auth0.com.)If you are using custom domains, your redirect URI will have the following format: https://<YOUR CUSTOM DOMAIN>/login/callback.
TroubleshootingIf you are receiving Access Denied when calling the GitHub API, you probably have not requested the correct permissions for the user during login. To learn more, see Add scopes/permissions to call Identity Provider’s APIs.

​
Configure Token Vault

You will need to configure your connection so it can retrieve and store access tokens for third-party APIs. Auth0’s Token Vault organizes the access and refresh tokens of federated connections in secure tokensets. Applications can then access the Token Vault to retrieve access tokens to call third-party APIs. To learn more, read Configure Token Vault.