VCSI: Supported Authentication Methods per Git Service in OIEP
The VCSI options defined in this topic can be used with the following Git services and protocols:
|
Protocols |
||
---|---|---|---|
Git Services |
HTTPS (BA*) |
SSH |
HTTPS (PAT**) |
GitHub |
|
|
|
GitLab |
|
|
|
Bitbucket |
|
|
|
*BA = Basic Authentication
**PAT = Personal Access Token / App Password
GitHub Limitations and Configuration
The following limitations apply when using GitHub with STEP:
Unlike other Git services, GitHub is more restrictive in the level of security placed on accessing its repositories, specifically:
-
Basic authentication for HTTPS connections is not supported.
-
RSA SSH keys that use the sha-1 signature algorithm are not supported.
To summarize, the available authentication methods for using the Change Package Git Delivery method or Git Delivery Method with a GitHub account are with a Personal Access Token (PAT) or SSH with a private key accessible to the application server.
Bitbucket Limitations and Configuration
Bitbucket does not support using Basic authentication for HTTPS connections. This means that apart from SSH keys, the only other usable authentication method is app passwords.