Skip to main content
When you add a self-hosted Git provider to a CodeRabbit Enterprise SSO workspace, update the existing CodeRabbit OAuth application on that Git provider before starting the SSO onboarding process. This allows the OAuth application to return users to the CodeRabbit workspace onboarding flow. This preparation is required for GitHub Enterprise Server and GitLab Self-Managed. It is not required for GitHub Cloud or GitLab.com. Before starting, give your CodeRabbit account team:
  • The base URL of each self-hosted Git provider instance
  • The Git organizations or groups that you want to add to the SSO workspace
  • Confirmation that the callback or redirect URI change described below is complete

​
GitHub Enterprise Server

For GitHub Enterprise Server, replace the CodeRabbit OAuth application’s authorization callback URL with the CodeRabbit application URL.
1

Open the CodeRabbit OAuth application

Sign in to GitHub Enterprise Server as an administrator who can manage the CodeRabbit OAuth application.Open:
2

Update the authorization callback URL

Set Authorization callback URL to:
GitHub OAuth application settings showing https://app.coderabbit.ai as the authorization callback URL

Set the GitHub Enterprise Server authorization callback URL to the CodeRabbit application URL

3

Save the application

Save the OAuth application and confirm the callback URL still shows https://app.coderabbit.ai/.

​
GitLab Self-Managed

For GitLab Self-Managed, add the CodeRabbit SSO onboarding callback as an additional redirect URI. Preserve the application’s existing redirect URI entries.
1

Open instance OAuth applications

Sign in to GitLab Self-Managed as an administrator and open:
2

Edit the CodeRabbit application

Find the authorized CodeRabbit application and select Edit.
GitLab instance OAuth applications list with the edit action highlighted for the CodeRabbit application

Find the CodeRabbit instance OAuth application and select Edit

3

Add the SSO onboarding redirect URI

In Redirect URI, start a new line and add:
Do not replace the existing CodeRabbit login redirect URI. GitLab accepts one redirect URI per line.
GitLab OAuth application Redirect URI field showing two redirect URIs on separate lines

Add the SSO onboarding callback on a separate line in the Redirect URI field

The screenshot shows temporary test-environment URLs. Use the production CodeRabbit callback URL shown above.
4

Save and verify the application

Save the application, reopen it, and confirm that both the existing login redirect URI and the new SSO onboarding callback are present.

​
What’s next

Enterprise SSO overview

Continue with the SSO rollout checklist and select the setup guide for your identity provider.

SCIM directory sync

Provision and deprovision workspace members automatically after SAML SSO is active.

Support

Contact CodeRabbit if you cannot locate the OAuth application or need help validating the callback configuration.