Last updated February 05, 2026

The Heroku GitHub Enterprise Server Integration is the recommended way to integrate with GitHub. It uses GitHub Apps, which are more secure compared to personal OAuth tokens and offer more granular permissions. Using the integration, you don’t need to maintain a service account as a separate user as the GitHub app acts on its own behalf, taking actions via the API directly using its own identity.

This integration provides the following advantages over Heroku GitHub Deploys:

• If the user who set up the integration leaves the GitHub org, deploys still work
• Allow for more permissions and control for repos

Prerequisites

To set up the integration, you must have:

• the manage permission for an active Heroku Enterprise account
• full access to the GitHub Enterprise Server org that contains all the repos you want to use with this integration
• no unowned pipelines
• have the expiring user access tokens feature disabled in GitHub

If you have just closed your contract or are currently transitioning to Enterprise, wait for your Enterprise account to be created.

Set Up the Integration

 

You can install the integration from the Enterprise account’s Settings tab. All users with manage permission at the Enterprise account level can see the installation option.

Select Connect to get promoted for the url for the GitHub Enterprise Server and the name of the organization (within the GitHub Enterprise Server) that you want to install the GitHub App on, in order to start the app installation process.

After filling out the modal and selecting Connect, you get redirected to the GitHub Enterprise Server to complete the GitHub App installation process.

Provide a name for this app and select Create GitHub App.

Next, select all or a specific set of repositories to allowlist:

Select Install & Authorize to complete the installation process and return to dashboard.heroku.com.

After installation is complete, the Settings tab updates to show the connected org:

You can then reconfigure apps and pipelines to use the new GitHub app. Here’s an example of a pipeline’s Settings tab that uses the OAuth Heroku GitHub integration, with option to connect with the new integration instead:

Reconfigure Repo Access

To reconfigure an existing GitHub App installation for the Enterprise Server integration, go to the Settings tab of the Enterprise account.

Select Configure/Uninstall on GitHub to get redirected to the GitHub App’s settings page where you can change the repository access or uninstall the GitHub App entirely:

View All Authorized Enterprise Server Orgs On Your Account

If you’re a member of more than one Enterprise Account using this new integration, you can see all the authorized GitHub apps in your account.

1. Select Account Settings from under your profile
2. Select the Applications tab.
3. View the list of authorized GitHub apps and connected org in the Third-Party Services section.

This example shows a user with the GitHub OAuth integration and the GitHub Enterprise Server integration. There’s no option to reauthorize or revoke access from GitHub Enterprise Server here because that integration is at the Enterprise account level, not your own account. To reauthorize, go the Enterprise account’s Settings tab. To revoke access, refer to Uninstalling the Integration.

Connect or Disconnect an App From a Repo

If your account is already connected to a GitHub Enterprise Server org, you can connect an individual app to a repo on it:

1. Select the app from your dashboard.
2. Go to the Deploy tab for the app.
3. Search for the repo to connect to.

Select Disconnect to disconnect a repo from the app.

Connect or Disconnect a Pipeline From a Repo

If your account is already connected to a GitHub Enterprise Server org, you can connect a pipeline to a repo on it:

1. Select the pipeline from your dashboard.
2. Go to the Settings tab for the pipeline.
3. Search for the repo to connect to.

Select Disconnect to disconnect a repo from the pipeline.

Uninstall the Integration

To uninstall:

1. Go to the Settings tab of the Enterprise account
2. Select the dropdown in the GitHub Enterprise Server panel
3. Select Configure/Uninstall on GitHub

After redirecting to the GitHub App settings page, select Uninstall.

Limitations

You must disable the expiring user access tokens feature in GitHub Enterprise Server to allow for proper functioning of this integration. That feature forces users to log in every 8 hours to ensure that their credentials and access remain valid. Failure to do so results in 401 Unauthorized errors returned from the API when attempting to access information about the GitHub Enterprise Server and GitHub app. Currently, the Heroku dashboard doesn’t support handling these errors appropriately.

There’s a 1:1 relationship between your Enterprise account and GitHub org. If you have any pipelines using repositories outside the GitHub org, fork and move them to that main GitHub org before configuring the integration.

You can only link a GitHub org to one Enterprise account at a time. If you linked your GitHub org to an Enterprise Account, and want to link it to a different one, you have to uninstall the integration first.

This integration doesn’t work for GitHub orgs that restrict access by IPs.

Heroku Buttons won’t work with private repositories if the user trying to launch it doesn’t have access to the repos.