Skip to main content

Understanding IAM for enterprises

You can invite existing personal accounts on GitHub.com to be members of your enterprise, and you can optionally enable SAML single sign-on (SSO) to centrally manage access. Alternatively, you can use Enterprise Managed Users with SAML SSO to create and control the accounts of your enterprise members.

About identity and access management

Administrators for GitHub Enterprise Cloud must decide how users will access the enterprise's resources on GitHub.com.

About SAML for enterprise IAM

You can use SAML single sign-on (SSO) to centrally manage access to organizations owned by your enterprise on GitHub.com.

About Enterprise Managed Users

You can centrally manage identity and access for your enterprise members on GitHub from your identity provider (IdP).

Abilities and restrictions of managed user accounts

If you centrally manage identity and access for your enterprise members on GitHub from your identity provider (IdP), some abilities and restrictions apply for your users' experience on GitHub.com.

Identifying the best authentication method for your enterprise

You can determine whether your enterprise would benefit more from SAML SSO or Enterprise Managed Users by asking yourself some questions about your enterprise's needs and workflows.

Troubleshooting identity and access management for your enterprise

Review common issues and solutions for identity and access management for your enterprise.