create github app
  -> authorization callback must contain the IDP name as defined in the OAuth resource

create github secret (okd-github-secret.yaml)
create github OAuth resource (okd-oauth-github)
  -> make sure secret name matches and idp name matches auth callback from github app

```
$ oc get user
$ oc adm policy add-role-to-user admin <github-username> -n <project-name>

```