Organization owners and admins can enforce SAML SSO so that all organization members must authenticate via an identity provider (IdP). You can also enforce SAML SSO for your organization. When you enforce SAML SSO, all members of the organization must authenticate through your IdP to access the organization's resources. Enforcement removes any members and administrators who have not authenticated via your IdP from the organization. GitHub sends an email notification to each removed user.
Enforce SAML SSO for your organization
Enable and test SAML SSO for your organization, then authenticate with your IdP at least once. For more information, see "Enabling and testing SAML single sign-on for your organization."
Prepare to enforce SAML SSO for your organization. For more information, see "Preparing to enforce SAML single sign-on in your organization."
In the top right corner of GitHub.com, click your profile photo, then click Your organizations.
Your organizations in the profile menu
Next to the organization, click Settings.
The settings button
In the "Security" section of the sidebar, click Authentication security.
Under "SAML single sign-on", select Require SAML SSO authentication for all members of the ORGANIZATION organization.
"Require SAML SSO authentication" checkbox
Under "Single sign-on recovery codes", review your recovery codes. Store the recovery codes in a safe location like a password manager.
Updated 7 months ago