diff --git a/web/src/pages/sources/oauth/OAuthSourceForm.ts b/web/src/pages/sources/oauth/OAuthSourceForm.ts
index a1dafbbe6..2a4fa7d21 100644
--- a/web/src/pages/sources/oauth/OAuthSourceForm.ts
+++ b/web/src/pages/sources/oauth/OAuthSourceForm.ts
@@ -254,7 +254,10 @@ export class OAuthSourceForm extends ModelForm<OAuthSource, string> {
                     >
                         <textarea class="pf-c-form-control"></textarea>
                     </ak-form-element-horizontal>
-                    <ak-form-element-horizontal label=${t`Additional Scope`} name="additionalScopes">
+                    <ak-form-element-horizontal
+                        label=${t`Additional Scope`}
+                        name="additionalScopes"
+                    >
                         <input
                             type="text"
                             value="${first(this.instance?.additionalScopes, "")}"
diff --git a/website/integrations/sources/github/github_org_membership.png b/website/integrations/sources/github/github_org_membership.png
new file mode 100644
index 000000000..6c54c6cbf
Binary files /dev/null and b/website/integrations/sources/github/github_org_membership.png differ
diff --git a/website/integrations/sources/github/index.md b/website/integrations/sources/github/index.md
index 0b1fa3515..0a4c265cb 100644
--- a/website/integrations/sources/github/index.md
+++ b/website/integrations/sources/github/index.md
@@ -48,3 +48,48 @@ Save, and you now have Github as a source.
 :::note
 For more details on how-to have the new source display on the Login Page see [here](../).
 :::
+
+### Checking for membership of a GitHub Organisation
+
+:::info
+Requires authentik 2021.12.5.
+:::
+
+To check if the user is member of an organisation, you can use the following policy on your flows:
+
+```python
+accepted_org = "foo"
+
+# Get the user-source connection object from the context, and get the access token
+connection = context['goauthentik.io/sources/connection']
+access_token = connection.access_token
+
+# We also access the user info authentik already retrieved, to get the correct username
+github_username = context["oauth_userinfo"]
+
+# Github does not include Organisations in the userinfo endpoint, so we have to call another URL
+
+orgs = requests.get(
+    "https://api.github.com/user/orgs",
+    auth=(github_username["login"], access_token),
+    headers={
+        "accept": "application/vnd.github.v3+json"
+    }
+).json()
+
+# `orgs` will be formatted like this
+# [
+#     {
+#         "login": "beryjuorg",
+#         [...]
+#     }
+# ]
+user_matched = any(org['login'] == accepted_org for org in orgs)
+if not user_matched:
+    ak_message(f"User is not member of {accepted_org}.")
+return user_matched
+```
+
+If a user is not member of the chosen organisation, they will see this message
+
+![](./github_org_membership.png)