Skip to main content
Warning

Migrations are coming to VA GitHub. See the Migrations section for more information.

Requesting Access to GHEC-US

Guides for requesting access to the GHEC-US enterprise.

Access to GHEC-US is currently restricted to the VA network, via Azure Virtual Desktop (AVD), Citrix Access Gateway (CAG), or Government Furnished Equipment (GFE). We are working to remove this restriction soon.

GitHub Enterprise Cloud - US (GHEC-US)

ATTENTION: These instructions are for the GHEC-US enterprise, which contains the https://va.ghe.com/software organization which is the US-based instance of GitHub Enterprise Cloud the VA is in the process of rolling out. If you are looking for the GHEC enterprise, which contains the https://github.com/department-of-veterans-affairs organization, please refer to the GitHub Enterprise Cloud Access Guide.

GHEC-US uses Single Sign-On to manage access to the instance. Users must have a PIV and a @va.gov email address to onboard.

Access is managed via a Self-Service Onboarding request. To onboard, simply navigate to Entra ID Apps and login with your @va.gov email address. Once on the page select Add Apps at the top of the page and select Request new Apps in the dropdown.

On the next page, search for GitHub and select Add on the GitHub Enterprise Managed User (OIDC) app. For the justification, provide the reason for your need to access GHEC-US. Once submitted, the request will be automatically approved.

GHEC-US Entra App

You may see other GitHub apps listed here, such as GitHub GHEC-EMU for the GHEC-EMU enterprise. Make sure you choose the GitHub Enterprise Managed User (OIDC) app for GHEC-US access.

Ordinarily you would be able to launch an Entra App directly from the Entra portal, however this is not currently working correctly for the GHEC-US app. We are investigating.

Account provisioning occurs every 40 minutes. Once your account is provisioned (you will not receive an email), you may login to the GHEC-US enterprise through your @va.gov Entra ID account.

Once provisioned, you will be added to the software organization. This is our default organization where software development should occur.