GitHub OAuth2 Authentication

You need to create a GitHub OAuth application (you will find this under the GitHub settings page). When you create the application you will need to specify a callback URL. Specify this as callback:

This callback URL must match the full HTTP address that you use in your browser to access Grafana, but with the suffix path of . When the GitHub OAuth application is created you will get a Client ID and a Client Secret. Specify these in the Grafana configuration file. For example:

Enable GitHub in Grafana

You may have to set the root_url option of [server] for the callback URL to be correct. For example in case you are serving Grafana behind a proxy.

You may allow users to sign-up via GitHub authentication by setting the option to true. When this option is set to true, any user successfully authenticating via GitHub authentication will be automatically signed up.

Require an active team membership for at least one of the given teams on GitHub. If the authenticated user isn’t a member of at least one of the teams they will not be able to register or authenticate with your Grafana instance. For example:

Require an active organization membership for at least one of the given organizations on GitHub. If the authenticated user isn’t a member of at least one of the organizations they will not be able to register or authenticate with your Grafana instance. For example

With Team Sync you can map your GitHub org teams to teams in Grafana so that your users will automatically be added to the correct teams.

Your GitHub teams can be referenced in two ways:

• @<org>/<slug>

Example: @grafana/developers