The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
GitHub’s proof-of-presence feature adds an identity-provider check before selected sensitive actions—but the public preview is limited to Enterprise Managed User enterprises on GitHub Enterprise Cloud that use Microsoft Entra ID for SSO. It is not a general security setting for all GitHub accounts.
What proof of presence does
When a member tries a covered action, GitHub redirects them to their enterprise identity provider. GitHub allows the action only after the member satisfies the policy configured there. Depending on that policy, the challenge can require signing in again, completing multifactor authentication (MFA), meeting a device-compliance condition, or satisfying another identity-provider rule.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Amazon eGift Card - Amazon Logo | $50.00 | Buy on Amazon |
| 2 |
|
Visa Physical Gift Card $200 (plus $6.95 Purchase Fee) | $206.95 | Buy on Amazon |
| 3 |
|
$200 Apple Gift Card—Email Delivery | $200.00 | Buy on Amazon |
| 4 |
|
Amazon eGift Card - Happy Birthday | $50.00 | Buy on Amazon |
| 5 |
|
$500 Apple Gift Card—Email Delivery - Season's greetings | $500.00 | Buy on Amazon |
GitHub describes the goal as confirming that an authorized person is acting when a sensitive operation occurs, rather than relying only on an existing session or token. In its September 24, 2026 changelog announcement, GitHub wrote: “Proof of presence confirms that a real, authorized person is acting at the moment the high-impact action happens, not just that a valid session or token was used.” This is the stated rationale, not a guarantee that every compromised credential or automated action will be blocked.
Recommended Free Tools
Who can use the public preview
The preview is for Enterprise Managed User enterprises on github.com and GitHub Enterprise Cloud with data residency (GHEC-DR) that use Microsoft Entra ID as their SSO identity provider through SAML or OIDC. The announcement does not establish availability for other GitHub account types, identity providers, or enterprise configurations.
#1 Best Overall
- Amazon.com Gift Cards never expire and carry no fees.
- Multiple gift card designs and denominations to choose from.
- Redeemable towards millions of items store-wide at Amazon.com or certain affiliated websites.
- Available for immediate delivery. Gift cards sent by email can be scheduled up to a year in advance.
- No returns and no refunds on Gift Cards.
Which actions are covered
GitHub’s announcement gives these examples of actions that can trigger a check:
- Creating a token
- Editing webhooks
- Changing organization security settings
- Viewing recovery codes
The examples include both changes and access to sensitive information. GitHub said proof before pull-request merges was coming soon; the announcement did not confirm that merge checks were already available.
Rank #2
- Gift Cards are shipped active and ready for use.
- This card is non-reloadable. No cash or ATM access. Funds do not expire. If available funds remain on your card after the valid thru date has passed, please call customer service for a replacement card. A one-time purchase fee applies at the time of checkout. No fees after purchase.
- To access your card information safely, type the complete website address shown on your Gift Card (MyGift.GiftCardMall.com) directly into your browser's address bar. Don't use search engines or shortened versions of the website address, as these may lead you to fake or fraudulent sites. Do not provide any Gift Card details (example: Card Number) to someone you do not know or trust. If you believe you've reached an illegitimate website, contact cardholder service at 1-888-524-1283. Be cautious of phishing sites, there are a variety of scams in which fraudsters try to trick others into paying with gift cards.
- To report your Lost or Stolen Physical Visa Card, call Customer Service 24/7 at 1 (888) 524-1283 to cancel your Gift Card as soon as you can. You will be asked to provide the Gift Card number and other identifying information.
- Use your Visa Gift Card in the U.S. everywhere Visa debit cards are accepted, including online.
Choose re-authentication or MFA
Enterprise administrators determine what the identity-provider challenge requires. The distinction is important: re-authentication does not automatically mean MFA.
| Option | What the member does | What determines the check |
|---|---|---|
| Re-authentication | Authenticates again with the identity provider. | Depending on the identity-provider policy, a password may satisfy the check. |
| MFA | Authenticates again and completes an additional configured factor, such as an authenticator-app or biometric challenge. | The enterprise’s configured MFA policy determines the challenge. |
The practical choice is between the assurance required by the enterprise’s actual identity-provider policy and the extra interaction members encounter at sensitive actions. GitHub’s announcement does not quantify the added friction or compare the effectiveness of these options.
Rank #3
- For all things Apple - products, accessories, apps, games, music, movies, TV shows, iCloud+, and more.
- Perfect for App Store purchases and subscriptions—get apps, games, music, movies, TV shows, and more.
- The perfect gift to say happy birthday, thank you, congratulations, and more.
- Available in $15 - 500, Card delivered via email or SMS
- Use it for purchases at any Apple Store location, on the Apple Store app, apple.com, the App Store, iTunes, Apple Music, Apple TV, Apple News+, Apple Books, Apple Arcade, iCloud+, Fitness+, Apple One, and other Apple properties in US only
How long a successful check lasts
After a successful challenge, members can perform further covered high-impact actions in the same browser session for two hours before another proof-of-presence check is required. The feature therefore does not prompt before every covered action, and the two-hour window should not be treated as continuous human verification.
What the feature can—and cannot—establish
The check adds a fresh identity-provider decision when a member attempts a covered operation. That can help address risks involving stolen session cookies or long-lived tokens, which GitHub cites as part of the feature’s purpose. The announcement reports no measured security outcome, attack reduction, or other effectiveness statistic, so it does not support a claim that the control will stop all misuse of valid credentials.
Rank #4
- Amazon.com Gift Cards never expire and carry no fees.
- Multiple gift card designs and denominations to choose from.
- Redeemable towards millions of items store-wide at Amazon.com or certain affiliated websites.
- Available for immediate delivery. Gift cards sent by email can be scheduled up to a year in advance.
- No returns and no refunds on Gift Cards.
Source
GitHub Changelog: “Require proof of presence for high-impact actions,” September 24, 2026
Quick Recap
Best Value
- For all things Apple - products, accessories, apps, games, music, movies, TV shows, iCloud+, and more.
- Perfect for App Store purchases and subscriptions—get apps, games, music, movies, TV shows, and more.
- The perfect gift to say happy birthday, thank you, congratulations, and more.
- Available in $15 - 500, Card delivered via email or SMS
- Use it for purchases at any Apple Store location, on the Apple Store app, apple.com, the App Store, iTunes, Apple Music, Apple TV, Apple News+, Apple Books, Apple Arcade, iCloud+, Fitness+, Apple One, and other Apple properties in US only
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
