Keycloak provides built-in support for GitHub, OpenShift, and most common social networks such as Facebook and Twitter. See Instructions to enable Login with GitHub.

You can also enable the SSH key and upload it to the Che users’ GitHub accounts.

To enable this feature when you register a GitHub identity provider:

  1. Set scope to repo,user,write:public_key.

  2. Set store tokens and stored tokens readable to ON.

    kc provider

  3. Add a default read-token role.

    kc roles

This is the default delegated OAuth service mode for multi-user Che. You can configure the OAuth service mode with the property che.oauth.service_mode.