# Automate SSO authorization for classic PATs and SSH keys

By Steven Van · 2026-09-16

A new REST API lets enterprise admins bulk-authorize a token or SSH key across up to 50 SSO-protected organizations at once.

Enterprise admins on [GitHub](<https://creatorstoolbox.com/tools/github>) can now automate SSO authorization for existing classic personal access tokens and SSH keys, instead of having developers authorize each organization by hand.

Enterprises with multiple SSO-protected organizations previously required per-organization authorization, which pushed some teams toward long-lived tokens to avoid the hassle of rotation. Admins can now opt in to a setting that allows credential delegation through enterprise-installed GitHub Apps with the **enterprise\_credentials:write** permission. Those apps can call a new [REST API](<https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations>) to bulk-authorize a classic PAT or SSH key across up to **50 organizations** in a single request.

- The credential is identified by its non-secret token ID or SSH key fingerprint, so no credential secrets pass through the GitHub App.

- Before granting authorization, the API confirms each target organization belongs to the enterprise, the credential owner belongs to each organization, and the enterprise uses enterprise-level SSO.

- Organizations with an existing active authorization are skipped.

This is available now for GitHub Enterprise Cloud accounts.

![GitHub](<https://github.githubassets.com/assets/GitHub-Mark-ea2971cee799.png>)

GitHub

Where the world builds software — Git hosting, pull requests, issues, Actions CI/CD, and Copilot, free for public and private repos.

[View GitHub →](<https://creatorstoolbox.com/tools/github>)

Sources

[Original source](<https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations>)

[Read Automate SSO authorization for classic PATs and SSH keys on Creators Toolbox](<https://creatorstoolbox.com/blog/github-automate-sso-authorization-for-classic-pats-and-ssh-keys>)

---
Canonical source: https://creatorstoolbox.com/blog/github-automate-sso-authorization-for-classic-pats-and-ssh-keys