Configuring authentication for Enterprise Managed Users
You can decide whether people use SAML or OIDC to authenticate, learn about support for conditional access policy, or disable authentication for your enterprise with managed users on GitHub.com.
Who can use this feature?
To manage users in your enterprise with your identity provider, your enterprise must be enabled for Enterprise Managed Users, which is available with GitHub Enterprise Cloud. For more information, see "About Enterprise Managed Users."
Configuring SAML single sign-on for Enterprise Managed Users
You can automatically manage access to your enterprise account on GitHub by configuring Security Assertion Markup Language (SAML) single sign-on (SSO).
Configuring OIDC for Enterprise Managed Users
You can automatically manage access to your enterprise account on GitHub by configuring OpenID Connect (OIDC) single sign-on (SSO) and enable support for your IdP's Conditional Access Policy (CAP).
About support for your IdP's Conditional Access Policy
When your enterprise uses OIDC SSO, GitHub can validate access to your enterprise and its resources using your IdP's Conditional Access Policy (CAP).
Disabling authentication and provisioning for Enterprise Managed Users
You can disable SAML or OIDC single sign-on (SSO) and SCIM provisioning for Enterprise Managed Users by using a recovery code to sign in as the setup user.