Troubleshooting team membership with identity provider groups

If you manage team membership using groups on your identity provider (IdP), but team membership is not in sync, you can troubleshoot the problem.

In this article

Note

SCIM for GitHub Enterprise Server is currently in beta and subject to change. GitHub recommends testing with a staging instance first. See "Setting up a staging instance."

About management of team membership with IdP groups

If you have configured SCIM provisioning, you can manage team and organization membership within your enterprise through your IdP by connecting teams on GitHub with groups on your IdP. You can review a list of teams that you've synchronized to IdP groups from your enterprise's settings. For more information, see "Managing team memberships with identity provider groups."

If GitHub is unable to synchronize team membership with a group on your IdP, you can view an error message and troubleshoot the problem.

Viewing errors for team synchronization with an IdP group

  1. In the top-right corner of GitHub Enterprise Server, click your profile photo, then click Enterprise settings.

    Screenshot of the drop-down menu that appears when you click the profile photo on GitHub Enterprise Server. The "Enterprise settings" option is highlighted in a dark orange outline.

  2. In the list of enterprises, click the enterprise you want to view.

  3. To review a list of IdP groups, in the left sidebar, click Identity provider.

  4. Under Identity provider, click Groups.

  5. If synchronization for a group is experiencing problems, you'll see a message that reads "Some groups are failing to synchronize to teams. Check that you have available licenses."

  6. In the list of IdP groups, click the group you'd like to review.

  7. To review the synchronization error for the group, under the name of the group, click Teams.

    If a team is unable to sync membership with a group on your IdP, you'll see a description of the problem under the team's name and membership count.

Error: "Out of sync"

If synchronization of team membership with a group on your IdP fails due to a problem other than licensing, you'll see a message that reads "Out of sync".

Screenshot of the IdP group page. A warning that a team is out of sync is outlined in dark orange.

GitHub will try to resolve this problem automatically during the next sync, which occurs at least once daily. You may be able to resolve the problem by unlinking the impacted team from the IdP group and then linking it to the same group again. For more information, see "Managing team memberships with identity provider groups."

If the problem persists, contact GitHub Enterprise Support and provide details about the organization, team, and the IdP group you're experiencing problems with.