diff --git a/api/types/github.go b/api/types/github.go
index 65021df5b44d9..3f182cee896e1 100644
--- a/api/types/github.go
+++ b/api/types/github.go
@@ -28,8 +28,8 @@ import (
 )
 
 const (
-	githubURL    = "https://github.com"
-	githubAPIURL = "https://api.github.com"
+	GithubURL    = "https://github.com"
+	GithubAPIURL = "https://api.github.com"
 )
 
 // GithubConnector defines an interface for a Github OAuth2 connector
@@ -279,12 +279,12 @@ func (c *GithubConnectorV3) SetDisplay(display string) {
 
 // GetEndpointURL returns the endpoint URL
 func (c *GithubConnectorV3) GetEndpointURL() string {
-	return githubURL
+	return GithubURL
 }
 
 // GetEndpointURL returns the API endpoint URL
 func (c *GithubConnectorV3) GetAPIEndpointURL() string {
-	return githubAPIURL
+	return GithubAPIURL
 }
 
 // MapClaims returns a list of logins based on the provided claims,
diff --git a/docs/pages/access-controls/sso/github-sso.mdx b/docs/pages/access-controls/sso/github-sso.mdx
index 37160d926f384..94653ad2841e3 100644
--- a/docs/pages/access-controls/sso/github-sso.mdx
+++ b/docs/pages/access-controls/sso/github-sso.mdx
@@ -91,11 +91,11 @@ kind: github
 metadata:
   name: github
 spec:
-  api_endpoint_url: ""
+  api_endpoint_url: https://api.github.com
   client_id: <client-id>
   client_secret: <client-secret>
   display: GitHub
-  endpoint_url: ""
+  endpoint_url: https://github.com
   redirect_url: https://<proxy-address>/v1/webapi/github/callback
   teams_to_logins: null
   teams_to_roles:
diff --git a/tool/tctl/sso/configure/github.go b/tool/tctl/sso/configure/github.go
index 89708deb146ad..e5f28a32079ba 100644
--- a/tool/tctl/sso/configure/github.go
+++ b/tool/tctl/sso/configure/github.go
@@ -49,8 +49,15 @@ func addGithubCommand(cmd *SSOConfigureCommand) *AuthKindCommand {
 	sub.Flag("display", "Sets the connector display name.").StringVar(&spec.Display)
 	sub.Flag("id", "GitHub app client ID.").PlaceHolder("ID").Required().StringVar(&spec.ClientID)
 	sub.Flag("secret", "GitHub app client secret.").Required().PlaceHolder("SECRET").StringVar(&spec.ClientSecret)
-	sub.Flag("endpoint-url", "Endpoint URL for GitHub instance.").StringVar(&spec.EndpointURL)
-	sub.Flag("api-endpoint-url", "API endpoint URL for GitHub instance.").StringVar(&spec.APIEndpointURL)
+	sub.Flag("endpoint-url", "Endpoint URL for GitHub instance.").
+		PlaceHolder("URL").
+		Default(types.GithubURL).
+		StringVar(&spec.EndpointURL)
+
+	sub.Flag("api-endpoint-url", "API endpoint URL for GitHub instance.").
+		PlaceHolder("URL").
+		Default(types.GithubAPIURL).
+		StringVar(&spec.APIEndpointURL)
 
 	// auto
 	sub.Flag("redirect-url", "Authorization callback URL.").PlaceHolder("URL").StringVar(&spec.RedirectURL)