Github Enterprise

XFA Enforcement can be used to add an extra verification when authenticating for a specific organization in Github Enterprise. When configured, the user will have to verify with XFA on a daily basis when the user attempts to access the organization.

During this verification, the user is first redirected through XFA to the external identity provider (in this case Google Workspace) to verify the identity of the user, after which device security is checked before the authentication is completed. This assures that only devices that comply with the security policy are allowed access.