Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

So if i use GitHub as my social sign in, is there a way to limit which orgs allowed to log in?

yes, you will be able to do that using hooks in the future

off the top of my head - the integration uses github oauth app which is installed in a github org

doesn’t this determine which org can sign in?

ie. only the org in GH which has the app installed

Yeah that's one way to do it. GH here was just an example. For example, Jenkins github plugin allows you to limit which orgs and groups can sign in, and some others let you limit which domains can sign up via Google. Not a deal breaker future or anything.