About management of team membership with IdP groups
With Enterprise Managed Users, you can manage team and organization membership within your enterprise through your IdP by connecting teams on GitHub with groups on your IdP. You can review a list of teams that you've synchronized to IdP groups from your enterprise's settings. For more information, see "Managing team memberships with identity provider groups."
If GitHub is unable to synchronize team membership with a group on your IdP, you can view an error message and troubleshoot the problem.
Viewing errors for team synchronization with an IdP group
-
In the top-right corner of GitHub, click your profile photo.
-
Depending on your environment, click Your enterprise, or click Your enterprises then click the enterprise you want to view.
-
To review a list of IdP groups, in the left sidebar, click Identity provider.
-
If synchronization for a group is experiencing problems, you'll see a message that reads "Some groups are failing to synchronize to teams. Check that you have available licenses."
-
In the list of IdP groups, click the group you'd like to review.
-
To review the synchronization error for the group, under the name of the group, click Teams.
If a team is unable to sync membership with a group on your IdP, you'll see a description of the problem under the team's name and membership count.
Error: "Out of sync due to insufficient licenses"
If your enterprise does not have sufficient licenses and GitHub is unable to synchronize team membership with a group on your IdP, you'll see a message that reads "Out of sync due to insufficient licenses".
The team may be missing members because your enterprise does not have sufficient licenses available. GitHub is unable to synchronize the team's membership with a group on your IdP, and any unlicensed user cannot be added to an organization.
-
Review the available licenses for your enterprise. For more information, see "Viewing license usage for GitHub Enterprise."
-
To resolve the problem, choose one of the following solutions.
- Remove users from the IdP group.
- Deprovision users from your enterprise.
- Purchase additional licenses to allow synchronization to complete. For more information, see "About per-user pricing."
Error: "Out of sync"
If synchronization of team membership with a group on your IdP fails due to a problem other than licensing, you'll see a message that reads "Out of sync".
GitHub will try to resolve this problem automatically during the next sync, which occurs at least once daily. You may be able to resolve the problem by unlinking the impacted team from the IdP group and then linking it to the same group again. For more information, see "Managing team memberships with identity provider groups."
If the problem persists, contact GitHub Enterprise Support and provide details about the organization, team, and the IdP group you're experiencing problems with.