GitHub Copilot previews app identities for automated services
GitHub announced a public preview of server-to-server authentication for organization-installed apps and services built with the Copilot SDK. It uses an app identity instead of an individual’s signed-in session. Usage is attributed to the organization and remains subject to its policies and spending controls.
Our perspective for teams building automations
Before connecting a business workflow, establish who owns it, what access it needs and how it can be stopped. A separate identity provides a way to address those decisions without depending on an employee’s personal account, but it does not replace testing or human review. We suggest starting with a low-impact internal task, reviewing its activity log and checking the revocation procedure. This is Radical IT Solutions editorial guidance; it does not claim we have implemented this preview or imply a GitHub partnership.
Want to assess an automation with defined access and ownership? Tell us about your workflow.