Forum Discussion
Authenticator & Git Hub
Hi everyone,
While signing up / managing authentication on Microsoft properties, I noticed an option connecting to a GitHub organization/account named Microsoft-corp rather than the official Microsoft organization.
Upon checking, the Microsoft-corp profile on GitHub has very few followers and looks distinctly different from the primary microsoft GitHub organization.
A couple of questions for the community or team:
- Is Microsoft-corp an internal/legacy OAuth app or enterprise tenant placeholder managed by Microsoft?
- Or is this an unauthorized/spoofed GitHub organization attempting to masquerade during third-party auth flows?
If anyone from the Microsoft team or community security folks can clarify whether this identity is legitimate, it would be greatly appreciated!
1 Reply
The GitHub organization Microsoft-corp is not the official Microsoft GitHub presence. The legitimate, verified organization is microsoft (https://github.com/microsoft). Microsoft owns GitHub outright, and it publishes all official repositories under the microsoft org. Any other similarly named orgs, including Microsoft-corp, are not official and should be treated with caution.
https://github.com/MicrosoftDocs/learn
