# Synchronizing a team with an identity provider group
You can synchronize a GitHub team with a supported identity provider (IdP) group to automatically add and remove team members.
## About team synchronization
If team sync is enabled for your organization or enterprise account, you can synchronize a GitHub team with an IdP group. When you do this, membership changes to the IdP group are reflected on GitHub automatically, reducing the need for manual updates and custom scripts.
You can assign an IdP group to multiple GitHub teams.
Once a GitHub team is connected to an IdP group, your IdP administrator must make team membership changes through the identity provider. You cannot manage team membership on GitHub.
Parent teams cannot synchronize with IdP groups. If the team you want to connect to an IdP group is a parent team, we recommend creating a new team or removing the nested relationships that make your team a parent team. For more information, see [About organization teams](/en/enterprise-server@3.20/organizations/organizing-members-into-teams/about-teams#nested-teams), [Creating an organization team](/en/enterprise-server@3.20/organizations/organizing-members-into-teams/creating-a-team), and [Moving a team in your organization's hierarchy](/en/enterprise-server@3.20/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy).
To manage repository access for any GitHub team, including teams connected to an IdP group, you must make changes with GitHub. For more information, see [About organization teams](/en/enterprise-server@3.20/organizations/organizing-members-into-teams/about-teams) and [Managing team access to an organization repository](/en/enterprise-server@3.20/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-team-access-to-an-organization-repository).
If you are managing a team's membership with an IdP group, you cannot assign the team maintainer role to a member of that team. For more information, see [Assigning the team maintainer role to a team member](/en/enterprise-server@3.20/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member).
## Prerequisites
To connect a team on GitHub to an IdP group, the team must already exist in your organization. Even if you have configured SCIM provisioning, creating a group in your IdP does not automatically create a team on GitHub.
You must configure user provisioning with SCIM for your GitHub Enterprise Server instance. For more information, see [About user provisioning with SCIM on GitHub Enterprise Server](/en/enterprise-server@3.20/admin/managing-iam/provisioning-user-accounts-with-scim/user-provisioning-with-scim-on-ghes).
## Connecting an IdP group to a team
When you connect an IdP group to a GitHub team, all users in the group are automatically added to the team.
1. In the upper-right corner of GitHub, click your profile picture, then click ** Organizations**.
2. Click the name of your organization.
3. Under your organization name, click ** Teams**.
4. Click the name of the team.
5. At the top of the team page, click ** Settings**.
6. Under "Identity Provider Groups", select the **Select Groups** dropdown menu, and click up to 5 identity provider groups.
7. Click **Save changes**.
## Disconnecting an IdP group from a team
1. In the upper-right corner of GitHub, click your profile picture, then click ** Organizations**.
2. Click the name of your organization.
3. Under your organization name, click ** Teams**.
4. Click the name of the team.
5. At the top of the team page, click ** Settings**.
6. Under "Identity Provider Groups", to the right of the IdP group you want to disconnect, click .
7. Click **Save changes**.