Organization owners and admins can enforce SAML SSO so that all organization members must authenticate via an identity provider (IdP). You can also enforce SAML SSO for your organization. When you enforce SAML SSO, all members of the organization must authenticate through your IdP to access the organization's resources. Enforcement removes any members and administrators who have not authenticated via your IdP from the organization. GitHub sends an email notification to each removed user.
Enforce SAML SSO for your organization
- Enable and test SAML SSO for your organization, then authenticate with your IdP at least once. For more information, see "Enabling and testing SAML single sign-on for your organization."
- Prepare to enforce SAML SSO for your organization. For more information, see "Preparing to enforce SAML single sign-on in your organization."
- In the top right corner of GitHub.com, click your profile photo, then click Your organizations.
Your organizations in the profile menu
- Next to the organization, click Settings.
- In the "Security" section of the sidebar, click Authentication security.
- Under "SAML single sign-on", select Require SAML SSO authentication for all members of the
- Under "Single sign-on recovery codes", review your recovery codes. Store the recovery codes in a safe location like a password manager.
Updated 10 months ago