Update versioning for SAML SSO (#23530)
This commit is contained in:
@@ -3,7 +3,6 @@ title: Configuring authentication and provisioning for your enterprise using Azu
|
|||||||
shortTitle: Configuring with Azure AD
|
shortTitle: Configuring with Azure AD
|
||||||
intro: 'You can use a tenant in Azure Active Directory (Azure AD) as an identity provider (IdP) to centrally manage authentication and user provisioning for {% data variables.product.product_location %}.'
|
intro: 'You can use a tenant in Azure Active Directory (Azure AD) as an identity provider (IdP) to centrally manage authentication and user provisioning for {% data variables.product.product_location %}.'
|
||||||
permissions: 'Enterprise owners can configure authentication and provisioning for an enterprise on {% data variables.product.product_name %}.'
|
permissions: 'Enterprise owners can configure authentication and provisioning for an enterprise on {% data variables.product.product_name %}.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
versions:
|
versions:
|
||||||
ghae: '*'
|
ghae: '*'
|
||||||
type: how_to
|
type: how_to
|
||||||
|
|||||||
@@ -3,9 +3,8 @@ title: Configuring authentication and provisioning for your enterprise using Okt
|
|||||||
shortTitle: Configuring with Okta
|
shortTitle: Configuring with Okta
|
||||||
intro: 'You can use Okta as an identity provider (IdP) to centrally manage authentication and user provisioning for {% data variables.product.prodname_ghe_managed %}.'
|
intro: 'You can use Okta as an identity provider (IdP) to centrally manage authentication and user provisioning for {% data variables.product.prodname_ghe_managed %}.'
|
||||||
permissions: 'Enterprise owners can configure authentication and provisioning for {% data variables.product.prodname_ghe_managed %}.'
|
permissions: 'Enterprise owners can configure authentication and provisioning for {% data variables.product.prodname_ghe_managed %}.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
versions:
|
versions:
|
||||||
github-ae: '*'
|
ghae: '*'
|
||||||
type: how_to
|
type: how_to
|
||||||
topics:
|
topics:
|
||||||
- Accounts
|
- Accounts
|
||||||
|
|||||||
@@ -2,9 +2,8 @@
|
|||||||
title: Mapping Okta groups to teams
|
title: Mapping Okta groups to teams
|
||||||
intro: 'You can map your Okta groups to teams on {% data variables.product.prodname_ghe_managed %} to automatically add and remove team members.'
|
intro: 'You can map your Okta groups to teams on {% data variables.product.prodname_ghe_managed %} to automatically add and remove team members.'
|
||||||
permissions: 'Enterprise owners can configure authentication and provisioning for {% data variables.product.prodname_ghe_managed %}.'
|
permissions: 'Enterprise owners can configure authentication and provisioning for {% data variables.product.prodname_ghe_managed %}.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
versions:
|
versions:
|
||||||
github-ae: '*'
|
ghae: '*'
|
||||||
type: how_to
|
type: how_to
|
||||||
topics:
|
topics:
|
||||||
- Accounts
|
- Accounts
|
||||||
|
|||||||
@@ -2,7 +2,6 @@
|
|||||||
title: About identity and access management for your enterprise
|
title: About identity and access management for your enterprise
|
||||||
shortTitle: About identity and access management
|
shortTitle: About identity and access management
|
||||||
intro: 'You can use SAML single sign-on (SSO) and System for Cross-domain Identity Management (SCIM) to centrally manage access {% ifversion ghec %}to organizations owned by your enterprise on {% data variables.product.prodname_dotcom_the_website %}{% endif %}{% ifversion ghae %}to {% data variables.product.product_location %}{% endif %}.'
|
intro: 'You can use SAML single sign-on (SSO) and System for Cross-domain Identity Management (SCIM) to centrally manage access {% ifversion ghec %}to organizations owned by your enterprise on {% data variables.product.prodname_dotcom_the_website %}{% endif %}{% ifversion ghae %}to {% data variables.product.product_location %}{% endif %}.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
versions:
|
versions:
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
ghae: '*'
|
ghae: '*'
|
||||||
|
|||||||
@@ -2,7 +2,6 @@
|
|||||||
title: Configuring SAML single sign-on for your enterprise
|
title: Configuring SAML single sign-on for your enterprise
|
||||||
shortTitle: Configure SAML SSO
|
shortTitle: Configure SAML SSO
|
||||||
intro: 'You can control and secure access to {% ifversion ghec %}resources like repositories, issues, and pull requests within your enterprise''s organizations{% elsif ghae %}your enterprise on {% data variables.product.prodname_ghe_managed %}{% endif %} by {% ifversion ghec %}enforcing{% elsif ghae %}configuring{% endif %} SAML single sign-on (SSO) through your identity provider (IdP).'
|
intro: 'You can control and secure access to {% ifversion ghec %}resources like repositories, issues, and pull requests within your enterprise''s organizations{% elsif ghae %}your enterprise on {% data variables.product.prodname_ghe_managed %}{% endif %} by {% ifversion ghec %}enforcing{% elsif ghae %}configuring{% endif %} SAML single sign-on (SSO) through your identity provider (IdP).'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
permissions: 'Enterprise owners can configure SAML SSO for an enterprise on {% data variables.product.product_name %}.'
|
permissions: 'Enterprise owners can configure SAML SSO for an enterprise on {% data variables.product.product_name %}.'
|
||||||
versions:
|
versions:
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
|
|||||||
@@ -3,7 +3,6 @@ title: Configuring user provisioning for your enterprise
|
|||||||
shortTitle: Configuring user provisioning
|
shortTitle: Configuring user provisioning
|
||||||
intro: 'You can configure System for Cross-domain Identity Management (SCIM) for your enterprise, which automatically provisions user accounts on {% data variables.product.product_location %} when you assign the application for {% data variables.product.product_location %} to a user on your identity provider (IdP).'
|
intro: 'You can configure System for Cross-domain Identity Management (SCIM) for your enterprise, which automatically provisions user accounts on {% data variables.product.product_location %} when you assign the application for {% data variables.product.product_location %} to a user on your identity provider (IdP).'
|
||||||
permissions: 'Enterprise owners can configure user provisioning for an enterprise on {% data variables.product.product_name %}.'
|
permissions: 'Enterprise owners can configure user provisioning for an enterprise on {% data variables.product.product_name %}.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
versions:
|
versions:
|
||||||
ghae: '*'
|
ghae: '*'
|
||||||
type: how_to
|
type: how_to
|
||||||
|
|||||||
@@ -1,13 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: About authentication with SAML single sign-on
|
title: About authentication with SAML single sign-on
|
||||||
intro: 'You can access {% ifversion ghae %}{% data variables.product.product_location %}{% elsif fpt %}an organization that uses SAML single sign-on (SSO){% endif %} by authenticating {% ifversion ghae %}with SAML single sign-on (SSO) {% endif %}through an identity provider (IdP).{% ifversion fpt or ghec %} After you authenticate with the IdP successfully from {% data variables.product.product_name %}, you must authorize any personal access token, SSH key, or {% data variables.product.prodname_oauth_app %} you would like to access the organization''s resources.{% endif %}'
|
intro: 'You can access {% ifversion ghae %}{% data variables.product.product_location %}{% elsif ghec %}an organization that uses SAML single sign-on (SSO){% endif %} by authenticating {% ifversion ghae %}with SAML single sign-on (SSO) {% endif %}through an identity provider (IdP).{% ifversion ghec %} After you authenticate with the IdP successfully from {% data variables.product.product_name %}, you must authorize any personal access token, SSH key, or {% data variables.product.prodname_oauth_app %} you would like to access the organization''s resources.{% endif %}'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/about-authentication-with-saml-single-sign-on
|
- /articles/about-authentication-with-saml-single-sign-on
|
||||||
- /github/authenticating-to-github/about-authentication-with-saml-single-sign-on
|
- /github/authenticating-to-github/about-authentication-with-saml-single-sign-on
|
||||||
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/about-authentication-with-saml-single-sign-on
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/about-authentication-with-saml-single-sign-on
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghae: '*'
|
ghae: '*'
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
@@ -57,5 +55,5 @@ After an enterprise or organization owner enables or enforces SAML SSO for an or
|
|||||||
|
|
||||||
## Further reading
|
## Further reading
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}- "[About identity and access management with SAML single sign-on](/organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on)"{% endif %}
|
{% ifversion ghec %}- "[About identity and access management with SAML single sign-on](/organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on)"{% endif %}
|
||||||
{% ifversion ghae %}- "[About identity and access management for your enterprise](/admin/authentication/about-identity-and-access-management-for-your-enterprise)"{% endif %}
|
{% ifversion ghae %}- "[About identity and access management for your enterprise](/admin/authentication/about-identity-and-access-management-for-your-enterprise)"{% endif %}
|
||||||
|
|||||||
@@ -7,7 +7,6 @@ redirect_from:
|
|||||||
- /github/authenticating-to-github/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
- /github/authenticating-to-github/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
||||||
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- SSO
|
- SSO
|
||||||
|
|||||||
@@ -7,7 +7,6 @@ redirect_from:
|
|||||||
- /github/authenticating-to-github/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
- /github/authenticating-to-github/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
||||||
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- SSO
|
- SSO
|
||||||
|
|||||||
@@ -1,13 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Authenticating with SAML single sign-on
|
title: Authenticating with SAML single sign-on
|
||||||
intro: 'You can authenticate to {% ifversion fpt %}a {% data variables.product.product_name %} organization {% elsif ghae %}{% data variables.product.product_location %} {% endif %}with SAML single sign-on (SSO){% ifversion fpt %} and view your active sessions{% endif %}.'
|
intro: 'You can authenticate to {% data variables.product.product_name %} with SAML single sign-on (SSO){% ifversion ghec %} and view your active sessions{% endif %}.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/authenticating-to-a-github-organization-with-saml-single-sign-on
|
- /articles/authenticating-to-a-github-organization-with-saml-single-sign-on
|
||||||
- /articles/authenticating-with-saml-single-sign-on
|
- /articles/authenticating-with-saml-single-sign-on
|
||||||
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghae: '*'
|
ghae: '*'
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
|
|||||||
@@ -6,7 +6,6 @@ redirect_from:
|
|||||||
- /github/authenticating-to-github/viewing-and-managing-your-active-saml-sessions
|
- /github/authenticating-to-github/viewing-and-managing-your-active-saml-sessions
|
||||||
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/viewing-and-managing-your-active-saml-sessions
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/viewing-and-managing-your-active-saml-sessions
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- SSO
|
- SSO
|
||||||
|
|||||||
@@ -17,7 +17,7 @@ When you set up SSH, you will need to generate a new SSH key and add it to the s
|
|||||||
|
|
||||||
You can further secure your SSH key by using a hardware security key, which requires the physical hardware security key to be attached to your computer when the key pair is used to authenticate with SSH. You can also secure your SSH key by adding your key to the ssh-agent and using a passphrase. For more information, see "[Working with SSH key passphrases](/github/authenticating-to-github/working-with-ssh-key-passphrases)."
|
You can further secure your SSH key by using a hardware security key, which requires the physical hardware security key to be attached to your computer when the key pair is used to authenticate with SSH. You can also secure your SSH key by adding your key to the ssh-agent and using a passphrase. For more information, see "[Working with SSH key passphrases](/github/authenticating-to-github/working-with-ssh-key-passphrases)."
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}To use your SSH key with a repository owned by an organization that uses SAML single sign-on, you must authorize the key. For more information, see "[Authorizing an SSH key for use with SAML single sign-on](/articles/authorizing-an-ssh-key-for-use-with-saml-single-sign-on)."{% endif %}
|
{% ifversion fpt or ghec %}To use your SSH key with a repository owned by an organization that uses SAML single sign-on, you must authorize the key. For more information, see "[Authorizing an SSH key for use with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}{% endif %}
|
||||||
|
|
||||||
To maintain account security, you can regularly review your SSH keys list and revoke any keys that are invalid or have been compromised. For more information, see "[Reviewing your SSH keys](/github/authenticating-to-github/reviewing-your-ssh-keys)."
|
To maintain account security, you can regularly review your SSH keys list and revoke any keys that are invalid or have been compromised. For more information, see "[Reviewing your SSH keys](/github/authenticating-to-github/reviewing-your-ssh-keys)."
|
||||||
|
|
||||||
|
|||||||
@@ -252,6 +252,6 @@ If you are using macOS or Linux, you may need to update your SSH client or insta
|
|||||||
|
|
||||||
- "[About SSH](/articles/about-ssh)"
|
- "[About SSH](/articles/about-ssh)"
|
||||||
- "[Working with SSH key passphrases](/articles/working-with-ssh-key-passphrases)"
|
- "[Working with SSH key passphrases](/articles/working-with-ssh-key-passphrases)"
|
||||||
{%- ifversion fpt %}
|
{%- ifversion fpt or ghec %}
|
||||||
- "[Authorizing an SSH key for use with SAML single sign-on](/articles/authorizing-an-ssh-key-for-use-with-saml-single-sign-on)"
|
- "[Authorizing an SSH key for use with SAML single sign-on](/articles/authorizing-an-ssh-key-for-use-with-saml-single-sign-on)"{% ifversion fpt %} in the {% data variables.product.prodname_ghe_cloud %} documentation{% endif %}
|
||||||
{%- endif %}
|
{%- endif %}
|
||||||
|
|||||||
@@ -76,7 +76,7 @@ If you authenticate without {% data variables.product.prodname_cli %}, you will
|
|||||||
|
|
||||||
### Authorizing for SAML single sign-on
|
### Authorizing for SAML single sign-on
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}To use a personal access token or SSH key to access resources owned by an organization that uses SAML single sign-on, you must also authorize the personal token or SSH key. For more information, see "[Authorizing a personal access token for use with SAML single sign-on](/github/authenticating-to-github/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on)" or "[Authorizing an SSH key for use with SAML single sign-on](/github/authenticating-to-github/authorizing-an-ssh-key-for-use-with-saml-single-sign-on)."{% endif %}
|
{% ifversion fpt or ghec %}To use a personal access token or SSH key to access resources owned by an organization that uses SAML single sign-on, you must also authorize the personal token or SSH key. For more information, see "[Authorizing a personal access token for use with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on)" or "[Authorizing an SSH key for use with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}{% endif %}
|
||||||
|
|
||||||
{% ifversion fpt or ghes > 3.1 or ghae or ghec %}
|
{% ifversion fpt or ghes > 3.1 or ghae or ghec %}
|
||||||
|
|
||||||
|
|||||||
@@ -27,7 +27,7 @@ shortTitle: Create a PAT
|
|||||||
|
|
||||||
Personal access tokens (PATs) are an alternative to using passwords for authentication to {% data variables.product.product_name %} when using the [GitHub API](/rest/overview/other-authentication-methods#via-oauth-and-personal-access-tokens) or the [command line](#using-a-token-on-the-command-line).
|
Personal access tokens (PATs) are an alternative to using passwords for authentication to {% data variables.product.product_name %} when using the [GitHub API](/rest/overview/other-authentication-methods#via-oauth-and-personal-access-tokens) or the [command line](#using-a-token-on-the-command-line).
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}If you want to use a PAT to access resources owned by an organization that uses SAML SSO, you must authorize the PAT. For more information, see "[About authentication with SAML single sign-on](/github/authenticating-to-github/about-authentication-with-saml-single-sign-on)" and "[Authorizing a personal access token for use with SAML single sign-on](/github/authenticating-to-github/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on)."{% endif %}
|
{% ifversion fpt or ghec %}If you want to use a PAT to access resources owned by an organization that uses SAML SSO, you must authorize the PAT. For more information, see "[About authentication with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/about-authentication-with-saml-single-sign-on)" and "[Authorizing a personal access token for use with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}{% endif %}
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}{% data reusables.user_settings.removes-personal-access-tokens %}{% endif %}
|
{% ifversion fpt or ghec %}{% data reusables.user_settings.removes-personal-access-tokens %}{% endif %}
|
||||||
|
|
||||||
@@ -65,7 +65,7 @@ A token with no assigned scopes can only access public information. To use your
|
|||||||
|
|
||||||
{% endwarning %}
|
{% endwarning %}
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}9. To use your token to authenticate to an organization that uses SAML SSO, [authorize the token for use with a SAML single-sign-on organization](/github/authenticating-to-github/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on).{% endif %}
|
{% ifversion fpt or ghec %}9. To use your token to authenticate to an organization that uses SAML single sign-on, authorize the token. For more information, see "[Authorizing a personal access token for use with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}{% endif %}
|
||||||
|
|
||||||
## Using a token on the command line
|
## Using a token on the command line
|
||||||
|
|
||||||
|
|||||||
@@ -62,7 +62,7 @@ You can upgrade your organization from {% data variables.product.prodname_free_t
|
|||||||
|
|
||||||
### Next steps for organizations using {% data variables.product.prodname_ghe_cloud %}
|
### Next steps for organizations using {% data variables.product.prodname_ghe_cloud %}
|
||||||
|
|
||||||
If you upgraded your organization to {% data variables.product.prodname_ghe_cloud %}, you can set up identity and access management for your organization. For more information, see "[Managing SAML single sign-on for your organization](/organizations/managing-saml-single-sign-on-for-your-organization)."
|
If you upgraded your organization to {% data variables.product.prodname_ghe_cloud %}, you can set up identity and access management for your organization. For more information, see "[Managing SAML single sign-on for your organization](/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
||||||
|
|
||||||
If you'd like to use an enterprise account with {% data variables.product.prodname_ghe_cloud %}, contact {% data variables.contact.contact_enterprise_sales %}. For more information, see "[About enterprise accounts](/enterprise-cloud@latest/admin/overview/about-enterprise-accounts){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
If you'd like to use an enterprise account with {% data variables.product.prodname_ghe_cloud %}, contact {% data variables.contact.contact_enterprise_sales %}. For more information, see "[About enterprise accounts](/enterprise-cloud@latest/admin/overview/about-enterprise-accounts){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
||||||
|
|
||||||
|
|||||||
@@ -73,7 +73,7 @@ SSH URLs provide access to a Git repository via SSH, a secure protocol. To use t
|
|||||||
|
|
||||||
When you `git clone`, `git fetch`, `git pull`, or `git push` to a remote repository using SSH URLs, you'll be prompted for a password and must provide your SSH key passphrase. For more information, see "[Working with SSH key passphrases](/github/authenticating-to-github/working-with-ssh-key-passphrases)."
|
When you `git clone`, `git fetch`, `git pull`, or `git push` to a remote repository using SSH URLs, you'll be prompted for a password and must provide your SSH key passphrase. For more information, see "[Working with SSH key passphrases](/github/authenticating-to-github/working-with-ssh-key-passphrases)."
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}If you are accessing an organization that uses SAML single sign-on (SSO), you must authorize your SSH key to access the organization before you authenticate. For more information, see "[About authentication with SAML single sign-on](/github/authenticating-to-github/about-authentication-with-saml-single-sign-on)" and "[Authorizing an SSH key for use with SAML single sign-on](/github/authenticating-to-github/authorizing-an-ssh-key-for-use-with-saml-single-sign-on)."{% endif %}
|
{% ifversion fpt or ghec %}If you are accessing an organization that uses SAML single sign-on (SSO), you must authorize your SSH key to access the organization before you authenticate. For more information, see "[About authentication with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/about-authentication-with-saml-single-sign-on)" and "[Authorizing an SSH key for use with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}{% endif %}
|
||||||
|
|
||||||
{% tip %}
|
{% tip %}
|
||||||
|
|
||||||
|
|||||||
@@ -23,7 +23,7 @@ shortTitle: Enterprise Cloud trial
|
|||||||
|
|
||||||
You can use organizations for free with {% data variables.product.prodname_free_team %}, which includes limited features. For additional features, such as SAML single sign-on (SSO), access control for {% data variables.product.prodname_pages %}, and included {% data variables.product.prodname_actions %} minutes, you can upgrade to {% data variables.product.prodname_ghe_cloud %}. For a detailed list of the features available with {% data variables.product.prodname_ghe_cloud %}, see our [Pricing](https://github.com/pricing) page.
|
You can use organizations for free with {% data variables.product.prodname_free_team %}, which includes limited features. For additional features, such as SAML single sign-on (SSO), access control for {% data variables.product.prodname_pages %}, and included {% data variables.product.prodname_actions %} minutes, you can upgrade to {% data variables.product.prodname_ghe_cloud %}. For a detailed list of the features available with {% data variables.product.prodname_ghe_cloud %}, see our [Pricing](https://github.com/pricing) page.
|
||||||
|
|
||||||
{% data reusables.saml.saml-accounts %} For more information, see "<a href="/organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on" class="dotcom-only">About identity and access management with SAML single sign-on</a>."
|
{% data reusables.saml.saml-accounts %} For more information, see "[About identity and access management with SAML single sign-on](/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on){% ifversion not ghec %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
||||||
|
|
||||||
{% data reusables.products.which-product-to-use %}
|
{% data reusables.products.which-product-to-use %}
|
||||||
|
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: About two-factor authentication and SAML single sign-on
|
title: About two-factor authentication and SAML single sign-on
|
||||||
intro: Organizations administrators can enable both SAML single sign-on and two-factor authentication to add additional authentication measures for their organization members.
|
intro: Organizations administrators can enable both SAML single sign-on and two-factor authentication to add additional authentication measures for their organization members.
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/about-two-factor-authentication-and-saml-single-sign-on
|
- /articles/about-two-factor-authentication-and-saml-single-sign-on
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/about-two-factor-authentication-and-saml-single-sign-on
|
- /github/setting-up-and-managing-organizations-and-teams/about-two-factor-authentication-and-saml-single-sign-on
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -5,7 +5,6 @@ redirect_from:
|
|||||||
- /articles/granting-access-to-your-organization-with-saml-single-sign-on
|
- /articles/granting-access-to-your-organization-with-saml-single-sign-on
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/granting-access-to-your-organization-with-saml-single-sign-on
|
- /github/setting-up-and-managing-organizations-and-teams/granting-access-to-your-organization-with-saml-single-sign-on
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: Managing bots and service accounts with SAML single sign-on
|
title: Managing bots and service accounts with SAML single sign-on
|
||||||
intro: Organizations that have enabled SAML single sign-on can retain access for bots and service accounts.
|
intro: Organizations that have enabled SAML single sign-on can retain access for bots and service accounts.
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/managing-bots-and-service-accounts-with-saml-single-sign-on
|
- /articles/managing-bots-and-service-accounts-with-saml-single-sign-on
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/managing-bots-and-service-accounts-with-saml-single-sign-on
|
- /github/setting-up-and-managing-organizations-and-teams/managing-bots-and-service-accounts-with-saml-single-sign-on
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -2,13 +2,11 @@
|
|||||||
title: Viewing and managing a member's SAML access to your organization
|
title: Viewing and managing a member's SAML access to your organization
|
||||||
intro: 'You can view and revoke an organization member''s linked identity, active sessions, and authorized credentials.'
|
intro: 'You can view and revoke an organization member''s linked identity, active sessions, and authorized credentials.'
|
||||||
permissions: Organization owners can view and manage a member's SAML access to an organization.
|
permissions: Organization owners can view and manage a member's SAML access to an organization.
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/viewing-and-revoking-organization-members-authorized-access-tokens
|
- /articles/viewing-and-revoking-organization-members-authorized-access-tokens
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/viewing-and-revoking-organization-members-authorized-access-tokens
|
- /github/setting-up-and-managing-organizations-and-teams/viewing-and-revoking-organization-members-authorized-access-tokens
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/viewing-and-managing-a-members-saml-access-to-your-organization
|
- /github/setting-up-and-managing-organizations-and-teams/viewing-and-managing-a-members-saml-access-to-your-organization
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -56,7 +56,7 @@ To search for specific events, use the `action` qualifier in your query. Actions
|
|||||||
| [`marketplace_agreement_signature`](#marketplace_agreement_signature-category-actions) | Contains all activities related to signing the {% data variables.product.prodname_marketplace %} Developer Agreement.
|
| [`marketplace_agreement_signature`](#marketplace_agreement_signature-category-actions) | Contains all activities related to signing the {% data variables.product.prodname_marketplace %} Developer Agreement.
|
||||||
| [`marketplace_listing`](#marketplace_listing-category-actions) | Contains all activities related to listing apps in {% data variables.product.prodname_marketplace %}.{% endif %}{% ifversion fpt or ghes > 3.0 or ghec %}
|
| [`marketplace_listing`](#marketplace_listing-category-actions) | Contains all activities related to listing apps in {% data variables.product.prodname_marketplace %}.{% endif %}{% ifversion fpt or ghes > 3.0 or ghec %}
|
||||||
| [`members_can_create_pages`](#members_can_create_pages-category-actions) | Contains all activities related to managing the publication of {% data variables.product.prodname_pages %} sites for repositories in the organization. For more information, see "[Managing the publication of {% data variables.product.prodname_pages %} sites for your organization](/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization)." | {% endif %}
|
| [`members_can_create_pages`](#members_can_create_pages-category-actions) | Contains all activities related to managing the publication of {% data variables.product.prodname_pages %} sites for repositories in the organization. For more information, see "[Managing the publication of {% data variables.product.prodname_pages %} sites for your organization](/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization)." | {% endif %}
|
||||||
| [`org`](#org-category-actions) | Contains activities related to organization membership.{% ifversion fpt or ghec %}
|
| [`org`](#org-category-actions) | Contains activities related to organization membership.{% ifversion ghec %}
|
||||||
| [`org_credential_authorization`](#org_credential_authorization-category-actions) | Contains all activities related to authorizing credentials for use with SAML single sign-on.{% endif %}{% ifversion fpt or ghes or ghae or ghec %}
|
| [`org_credential_authorization`](#org_credential_authorization-category-actions) | Contains all activities related to authorizing credentials for use with SAML single sign-on.{% endif %}{% ifversion fpt or ghes or ghae or ghec %}
|
||||||
| [`organization_label`](#organization_label-category-actions) | Contains all activities related to default labels for repositories in your organization.{% endif %}
|
| [`organization_label`](#organization_label-category-actions) | Contains all activities related to default labels for repositories in your organization.{% endif %}
|
||||||
| [`oauth_application`](#oauth_application-category-actions) | Contains all activities related to OAuth Apps.{% ifversion fpt or ghes > 3.0 or ghec %}
|
| [`oauth_application`](#oauth_application-category-actions) | Contains all activities related to OAuth Apps.{% ifversion fpt or ghes > 3.0 or ghec %}
|
||||||
@@ -423,12 +423,12 @@ For more information, see "[Managing the publication of {% data variables.produc
|
|||||||
| `block_user` | Triggered when an organization owner [blocks a user from accessing the organization's repositories](/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization).
|
| `block_user` | Triggered when an organization owner [blocks a user from accessing the organization's repositories](/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization).
|
||||||
| `cancel_invitation` | Triggered when an organization invitation has been revoked. {% endif %}{% ifversion fpt or ghes or ghec %}
|
| `cancel_invitation` | Triggered when an organization invitation has been revoked. {% endif %}{% ifversion fpt or ghes or ghec %}
|
||||||
| `create_actions_secret` | Triggered when a {% data variables.product.prodname_actions %} secret is created for an organization. For more information, see "[Creating encrypted secrets for an organization](/actions/reference/encrypted-secrets#creating-encrypted-secrets-for-an-organization)."{% endif %} {% ifversion fpt or ghec %}
|
| `create_actions_secret` | Triggered when a {% data variables.product.prodname_actions %} secret is created for an organization. For more information, see "[Creating encrypted secrets for an organization](/actions/reference/encrypted-secrets#creating-encrypted-secrets-for-an-organization)."{% endif %} {% ifversion fpt or ghec %}
|
||||||
| `disable_oauth_app_restrictions` | Triggered when an owner [disables {% data variables.product.prodname_oauth_app %} access restrictions](/articles/disabling-oauth-app-access-restrictions-for-your-organization) for your organization.
|
| `disable_oauth_app_restrictions` | Triggered when an owner [disables {% data variables.product.prodname_oauth_app %} access restrictions](/articles/disabling-oauth-app-access-restrictions-for-your-organization) for your organization.{% ifversion ghec %}
|
||||||
| `disable_saml` | Triggered when an organization admin disables SAML single sign-on for an organization.{% endif %}
|
| `disable_saml` | Triggered when an organization admin disables SAML single sign-on for an organization.{% endif %}{% endif %}
|
||||||
| `disable_member_team_creation_permission` | Triggered when an organization owner limits team creation to owners. For more information, see "[Setting team creation permissions in your organization](/articles/setting-team-creation-permissions-in-your-organization)." |{% ifversion not ghae %}
|
| `disable_member_team_creation_permission` | Triggered when an organization owner limits team creation to owners. For more information, see "[Setting team creation permissions in your organization](/articles/setting-team-creation-permissions-in-your-organization)." |{% ifversion not ghae %}
|
||||||
| `disable_two_factor_requirement` | Triggered when an owner disables a two-factor authentication requirement for all members{% ifversion fpt or ghec %}, billing managers,{% endif %} and outside collaborators in an organization.{% endif %}{% ifversion fpt or ghec %}
|
| `disable_two_factor_requirement` | Triggered when an owner disables a two-factor authentication requirement for all members{% ifversion fpt or ghec %}, billing managers,{% endif %} and outside collaborators in an organization.{% endif %}{% ifversion fpt or ghec %}
|
||||||
| `enable_oauth_app_restrictions` | Triggered when an owner [enables {% data variables.product.prodname_oauth_app %} access restrictions](/articles/enabling-oauth-app-access-restrictions-for-your-organization) for your organization.
|
| `enable_oauth_app_restrictions` | Triggered when an owner [enables {% data variables.product.prodname_oauth_app %} access restrictions](/articles/enabling-oauth-app-access-restrictions-for-your-organization) for your organization.{% ifversion ghec %}
|
||||||
| `enable_saml` | Triggered when an organization admin [enables SAML single sign-on](/articles/enabling-and-testing-saml-single-sign-on-for-your-organization) for an organization.{% endif %}
|
| `enable_saml` | Triggered when an organization admin [enables SAML single sign-on](/articles/enabling-and-testing-saml-single-sign-on-for-your-organization) for an organization.{% endif %}{% endif %}
|
||||||
| `enable_member_team_creation_permission` | Triggered when an organization owner allows members to create teams. For more information, see "[Setting team creation permissions in your organization](/articles/setting-team-creation-permissions-in-your-organization)." |{% ifversion not ghae %}
|
| `enable_member_team_creation_permission` | Triggered when an organization owner allows members to create teams. For more information, see "[Setting team creation permissions in your organization](/articles/setting-team-creation-permissions-in-your-organization)." |{% ifversion not ghae %}
|
||||||
| `enable_two_factor_requirement` | Triggered when an owner requires two-factor authentication for all members{% ifversion fpt or ghec %}, billing managers,{% endif %} and outside collaborators in an organization.{% endif %}{% ifversion fpt or ghec %}
|
| `enable_two_factor_requirement` | Triggered when an owner requires two-factor authentication for all members{% ifversion fpt or ghec %}, billing managers,{% endif %} and outside collaborators in an organization.{% endif %}{% ifversion fpt or ghec %}
|
||||||
| `invite_member` | Triggered when [a new user was invited to join your organization](/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization).
|
| `invite_member` | Triggered when [a new user was invited to join your organization](/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization).
|
||||||
@@ -440,7 +440,7 @@ For more information, see "[Managing the publication of {% data variables.produc
|
|||||||
| `remove_billing_manager` | Triggered when an [owner removes a billing manager from an organization](/articles/removing-a-billing-manager-from-your-organization/) or when [two-factor authentication is required in an organization](/articles/requiring-two-factor-authentication-in-your-organization) and a billing manager doesn't use 2FA or disables 2FA. |{% endif %}
|
| `remove_billing_manager` | Triggered when an [owner removes a billing manager from an organization](/articles/removing-a-billing-manager-from-your-organization/) or when [two-factor authentication is required in an organization](/articles/requiring-two-factor-authentication-in-your-organization) and a billing manager doesn't use 2FA or disables 2FA. |{% endif %}
|
||||||
| `remove_member` | Triggered when an [owner removes a member from an organization](/articles/removing-a-member-from-your-organization/){% ifversion not ghae %} or when [two-factor authentication is required in an organization](/articles/requiring-two-factor-authentication-in-your-organization) and an organization member doesn't use 2FA or disables 2FA{% endif %}. Also triggered when an [organization member removes themselves](/articles/removing-yourself-from-an-organization/) from an organization.|
|
| `remove_member` | Triggered when an [owner removes a member from an organization](/articles/removing-a-member-from-your-organization/){% ifversion not ghae %} or when [two-factor authentication is required in an organization](/articles/requiring-two-factor-authentication-in-your-organization) and an organization member doesn't use 2FA or disables 2FA{% endif %}. Also triggered when an [organization member removes themselves](/articles/removing-yourself-from-an-organization/) from an organization.|
|
||||||
| `remove_outside_collaborator` | Triggered when an owner removes an outside collaborator from an organization{% ifversion not ghae %} or when [two-factor authentication is required in an organization](/articles/requiring-two-factor-authentication-in-your-organization) and an outside collaborator does not use 2FA or disables 2FA{% endif %}. |
|
| `remove_outside_collaborator` | Triggered when an owner removes an outside collaborator from an organization{% ifversion not ghae %} or when [two-factor authentication is required in an organization](/articles/requiring-two-factor-authentication-in-your-organization) and an outside collaborator does not use 2FA or disables 2FA{% endif %}. |
|
||||||
| `remove_self_hosted_runner` | Triggered when a self-hosted runner is removed. For more information, see "[Removing a runner from an organization](/actions/hosting-your-own-runners/removing-self-hosted-runners#removing-a-runner-from-an-organization)." {% ifversion fpt or ghec %}
|
| `remove_self_hosted_runner` | Triggered when a self-hosted runner is removed. For more information, see "[Removing a runner from an organization](/actions/hosting-your-own-runners/removing-self-hosted-runners#removing-a-runner-from-an-organization)." {% ifversion ghec %}
|
||||||
| `revoke_external_identity` | Triggered when an organization owner revokes a member's linked identity. For more information, see "[Viewing and managing a member's SAML access to your organization](/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity)."
|
| `revoke_external_identity` | Triggered when an organization owner revokes a member's linked identity. For more information, see "[Viewing and managing a member's SAML access to your organization](/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity)."
|
||||||
| `revoke_sso_session` | Triggered when an organization owner revokes a member's SAML session. For more information, see "[Viewing and managing a member's SAML access to your organization](/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity)." {% endif %}
|
| `revoke_sso_session` | Triggered when an organization owner revokes a member's SAML session. For more information, see "[Viewing and managing a member's SAML access to your organization](/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity)." {% endif %}
|
||||||
| `runner_group_created` | Triggered when a self-hosted runner group is created. For more information, see "[Creating a self-hosted runner group for an organization](/actions/hosting-your-own-runners/managing-access-to-self-hosted-runners-using-groups#creating-a-self-hosted-runner-group-for-an-organization)."
|
| `runner_group_created` | Triggered when a self-hosted runner group is created. For more information, see "[Creating a self-hosted runner group for an organization](/actions/hosting-your-own-runners/managing-access-to-self-hosted-runners-using-groups#creating-a-self-hosted-runner-group-for-an-organization)."
|
||||||
@@ -464,7 +464,7 @@ For more information, see "[Managing the publication of {% data variables.produc
|
|||||||
| `update_saml_provider_settings` | Triggered when an organization's SAML provider settings are updated.
|
| `update_saml_provider_settings` | Triggered when an organization's SAML provider settings are updated.
|
||||||
| `update_terms_of_service` | Triggered when an organization changes between the Standard Terms of Service and the Corporate Terms of Service. For more information, see "[Upgrading to the Corporate Terms of Service](/articles/upgrading-to-the-corporate-terms-of-service)."{% endif %}
|
| `update_terms_of_service` | Triggered when an organization changes between the Standard Terms of Service and the Corporate Terms of Service. For more information, see "[Upgrading to the Corporate Terms of Service](/articles/upgrading-to-the-corporate-terms-of-service)."{% endif %}
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}
|
{% ifversion ghec %}
|
||||||
### `org_credential_authorization` category actions
|
### `org_credential_authorization` category actions
|
||||||
|
|
||||||
| Action | Description
|
| Action | Description
|
||||||
|
|||||||
@@ -19,7 +19,9 @@ shortTitle: Create accounts for people
|
|||||||
Because you access an organization by logging in to a user account, each of your team members needs to create their own user account. After you have usernames for each person you'd like to add to your organization, you can add the users to teams.
|
Because you access an organization by logging in to a user account, each of your team members needs to create their own user account. After you have usernames for each person you'd like to add to your organization, you can add the users to teams.
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}
|
{% ifversion fpt or ghec %}
|
||||||
If you need greater control over the user accounts of your organization members, consider {% data variables.product.prodname_emus %}. {% data reusables.enterprise-accounts.emu-short-summary %}
|
{% ifversion fpt %}Organizations that use {% data variables.product.prodname_ghe_cloud %}{% else %}You{% endif %} can use SAML single sign-on to centrally manage the access that user accounts have to the organization's resources through an identity provider (IdP). For more information, see "[About identity and access management with SAML single sign-on](/organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
||||||
|
|
||||||
|
You can also consider {% data variables.product.prodname_emus %}. {% data reusables.enterprise-accounts.emu-short-summary %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
## Adding users to your organization
|
## Adding users to your organization
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Inviting users to join your organization
|
title: Inviting users to join your organization
|
||||||
intro: 'You can invite anyone to become a member of your organization using their {% data variables.product.product_name %} username or email address.'
|
intro: 'You can invite anyone to become a member of your organization using their username or email address for {% data variables.product.product_location %}.'
|
||||||
permissions: Organization owners can invite users to join an organization.
|
permissions: Organization owners can invite users to join an organization.
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/adding-or-inviting-members-to-a-team-in-an-organization/
|
- /articles/adding-or-inviting-members-to-a-team-in-an-organization/
|
||||||
@@ -23,6 +23,8 @@ If your organization has a paid per-user subscription, an unused license must be
|
|||||||
|
|
||||||
If your organization requires members to use two-factor authentication, users that you invite must enable two-factor authentication before accepting the invitation. For more information, see "[Requiring two-factor authentication in your organization](/organizations/keeping-your-organization-secure/requiring-two-factor-authentication-in-your-organization)" and "[Securing your account with two-factor authentication (2FA)](/github/authenticating-to-github/securing-your-account-with-two-factor-authentication-2fa)."
|
If your organization requires members to use two-factor authentication, users that you invite must enable two-factor authentication before accepting the invitation. For more information, see "[Requiring two-factor authentication in your organization](/organizations/keeping-your-organization-secure/requiring-two-factor-authentication-in-your-organization)" and "[Securing your account with two-factor authentication (2FA)](/github/authenticating-to-github/securing-your-account-with-two-factor-authentication-2fa)."
|
||||||
|
|
||||||
|
{% ifversion fpt %}Organizations that use {% data variables.product.prodname_ghe_cloud %}{% else %}You{% endif %} can implement SCIM to add, manage, and remove organization members' access to {% data variables.product.prodname_dotcom_the_website %} through an identity provider (IdP). For more information, see "[About SCIM](/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/about-scim){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
||||||
|
|
||||||
## Inviting a user to join your organization
|
## Inviting a user to join your organization
|
||||||
|
|
||||||
{% data reusables.profile.access_org %}
|
{% data reusables.profile.access_org %}
|
||||||
|
|||||||
@@ -36,7 +36,7 @@ After changing your organization's name, your old organization name becomes avai
|
|||||||
After changing your organization's name:
|
After changing your organization's name:
|
||||||
- Links to your previous organization profile page, such as `https://{% data variables.command_line.backticks %}/previousorgname`, will return a 404 error. We recommend you update links to your organization from other sites{% ifversion fpt or ghec %}, such as your LinkedIn or Twitter profiles{% endif %}.
|
- Links to your previous organization profile page, such as `https://{% data variables.command_line.backticks %}/previousorgname`, will return a 404 error. We recommend you update links to your organization from other sites{% ifversion fpt or ghec %}, such as your LinkedIn or Twitter profiles{% endif %}.
|
||||||
- API requests that use the old organization's name will return a 404 error. We recommend you update the old organization name in your API requests.
|
- API requests that use the old organization's name will return a 404 error. We recommend you update the old organization name in your API requests.
|
||||||
- There are no automatic [@mention](/articles/basic-writing-and-formatting-syntax/#mentioning-people-and-teams) redirects for teams that use the old organization's name.{% ifversion fpt or ghec %}
|
- There are no automatic [@mention](/articles/basic-writing-and-formatting-syntax/#mentioning-people-and-teams) redirects for teams that use the old organization's name.{% ifversion ghec %}
|
||||||
- If SAML single sign-on (SSO) is enabled for the organization, you must update the organization name in the application for {% data variables.product.prodname_ghe_cloud %} on your identity provider (IdP). If you don't update the organization name on your IdP, members of the organization will no longer be able to authenticate with your IdP to access the organization's resources. For more information, see "[Connecting your identity provider to your organization](/github/setting-up-and-managing-organizations-and-teams/connecting-your-identity-provider-to-your-organization)."{% endif %}
|
- If SAML single sign-on (SSO) is enabled for the organization, you must update the organization name in the application for {% data variables.product.prodname_ghe_cloud %} on your identity provider (IdP). If you don't update the organization name on your IdP, members of the organization will no longer be able to authenticate with your IdP to access the organization's resources. For more information, see "[Connecting your identity provider to your organization](/github/setting-up-and-managing-organizations-and-teams/connecting-your-identity-provider-to-your-organization)."{% endif %}
|
||||||
|
|
||||||
## Changing your organization's name
|
## Changing your organization's name
|
||||||
|
|||||||
@@ -108,10 +108,10 @@ Some of the features listed below are limited to organizations using {% data var
|
|||||||
| Attribute your sponsorships to another organization (see "[Attributing sponsorships to your organization](/sponsors/sponsoring-open-source-contributors/attributing-sponsorships-to-your-organization)" for details ) | **X** | | | |
|
| Attribute your sponsorships to another organization (see "[Attributing sponsorships to your organization](/sponsors/sponsoring-open-source-contributors/attributing-sponsorships-to-your-organization)" for details ) | **X** | | | |
|
||||||
| Manage the publication of {% data variables.product.prodname_pages %} sites from repositories in the organization (see "[Managing the publication of {% data variables.product.prodname_pages %} sites for your organization](/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization)" for details) | **X** | | | |
|
| Manage the publication of {% data variables.product.prodname_pages %} sites from repositories in the organization (see "[Managing the publication of {% data variables.product.prodname_pages %} sites for your organization](/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization)" for details) | **X** | | | |
|
||||||
| Manage security and analysis settings (see "[Managing security and analysis settings for your organization](/organizations/keeping-your-organization-secure/managing-security-and-analysis-settings-for-your-organization)" for details) | **X** | | | **X** |
|
| Manage security and analysis settings (see "[Managing security and analysis settings for your organization](/organizations/keeping-your-organization-secure/managing-security-and-analysis-settings-for-your-organization)" for details) | **X** | | | **X** |
|
||||||
| View the security overview for the organization (see "[About the security overview](/code-security/security-overview/about-the-security-overview)" for details) | **X** | | | **X** |
|
| View the security overview for the organization (see "[About the security overview](/code-security/security-overview/about-the-security-overview)" for details) | **X** | | | **X** |{% ifversion ghec %}
|
||||||
| Enable and enforce [SAML single sign-on](/articles/about-identity-and-access-management-with-saml-single-sign-on) | **X** | | | |
|
| Enable and enforce [SAML single sign-on](/articles/about-identity-and-access-management-with-saml-single-sign-on) | **X** | | | |
|
||||||
| [Manage a user's SAML access to your organization](/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization) | **X** | | | |
|
| [Manage a user's SAML access to your organization](/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization) | **X** | | | |
|
||||||
| Manage an organization's SSH certificate authorities (see "[Managing your organization's SSH certificate authorities](/articles/managing-your-organizations-ssh-certificate-authorities)" for details) | **X** | | | |
|
| Manage an organization's SSH certificate authorities (see "[Managing your organization's SSH certificate authorities](/articles/managing-your-organizations-ssh-certificate-authorities)" for details) | **X** | | | |{% endif %}
|
||||||
| Transfer repositories | **X** | | | |
|
| Transfer repositories | **X** | | | |
|
||||||
| Purchase, install, manage billing for, and cancel {% data variables.product.prodname_marketplace %} apps | **X** | | | |
|
| Purchase, install, manage billing for, and cancel {% data variables.product.prodname_marketplace %} apps | **X** | | | |
|
||||||
| List apps in {% data variables.product.prodname_marketplace %} | **X** | | | |
|
| List apps in {% data variables.product.prodname_marketplace %} | **X** | | | |
|
||||||
@@ -125,8 +125,8 @@ Some of the features listed below are limited to organizations using {% data var
|
|||||||
| [View people with access to an organization repository](/articles/viewing-people-with-access-to-your-repository) | **X** | | | |
|
| [View people with access to an organization repository](/articles/viewing-people-with-access-to-your-repository) | **X** | | | |
|
||||||
| [Export a list of people with access to an organization repository](/articles/viewing-people-with-access-to-your-repository/#exporting-a-list-of-people-with-access-to-your-repository) | **X** | | | |
|
| [Export a list of people with access to an organization repository](/articles/viewing-people-with-access-to-your-repository/#exporting-a-list-of-people-with-access-to-your-repository) | **X** | | | |
|
||||||
| Manage the default branch name (see "[Managing the default branch name for repositories in your organization](/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization)") | **X** | | | |
|
| Manage the default branch name (see "[Managing the default branch name for repositories in your organization](/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization)") | **X** | | | |
|
||||||
| Manage default labels (see "[Managing default labels for repositories in your organization](/articles/managing-default-labels-for-repositories-in-your-organization)") | **X** | | | |
|
| Manage default labels (see "[Managing default labels for repositories in your organization](/articles/managing-default-labels-for-repositories-in-your-organization)") | **X** | | | |{% ifversion ghec %}
|
||||||
| Enable team synchronization (see "[Managing team synchronization for your organization](/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization)" for details) | **X** | | | |
|
| Enable team synchronization (see "[Managing team synchronization for your organization](/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization)" for details) | **X** | | | |{% endif %}
|
||||||
|
|
||||||
{% elsif ghes > 3.2 or ghae-issue-4999 %}
|
{% elsif ghes > 3.2 or ghae-issue-4999 %}
|
||||||
<!--GHES 3.3+ and eventual GHAE release don't have the extra column for Billing managers, but have security managers-->
|
<!--GHES 3.3+ and eventual GHAE release don't have the extra column for Billing managers, but have security managers-->
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: About identity and access management with SAML single sign-on
|
title: About identity and access management with SAML single sign-on
|
||||||
intro: 'If you centrally manage your users'' identities and applications with an identity provider (IdP), you can configure Security Assertion Markup Language (SAML) single sign-on (SSO) to protect your organization''s resources on {% data variables.product.prodname_dotcom %}.'
|
intro: 'If you centrally manage your users'' identities and applications with an identity provider (IdP), you can configure Security Assertion Markup Language (SAML) single sign-on (SSO) to protect your organization''s resources on {% data variables.product.prodname_dotcom %}.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/about-identity-and-access-management-with-saml-single-sign-on
|
- /articles/about-identity-and-access-management-with-saml-single-sign-on
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/about-identity-and-access-management-with-saml-single-sign-on
|
- /github/setting-up-and-managing-organizations-and-teams/about-identity-and-access-management-with-saml-single-sign-on
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
@@ -24,8 +22,6 @@ shortTitle: IAM with SAML SSO
|
|||||||
|
|
||||||
Organization owners can enforce SAML SSO for an individual organization, or enterprise owners can enforce SAML SSO for all organizations in an enterprise account. For more information, see "[Configuring SAML single sign-on for your enterprise](/enterprise-cloud@latest/admin/authentication/managing-identity-and-access-for-your-enterprise/configuring-saml-single-sign-on-for-your-enterprise)."
|
Organization owners can enforce SAML SSO for an individual organization, or enterprise owners can enforce SAML SSO for all organizations in an enterprise account. For more information, see "[Configuring SAML single sign-on for your enterprise](/enterprise-cloud@latest/admin/authentication/managing-identity-and-access-for-your-enterprise/configuring-saml-single-sign-on-for-your-enterprise)."
|
||||||
|
|
||||||
{% data reusables.saml.saml-requires-ghec %}{% ifversion fpt %} {% data reusables.enterprise.link-to-ghec-trial %}{% endif %}
|
|
||||||
|
|
||||||
{% data reusables.saml.outside-collaborators-exemption %}
|
{% data reusables.saml.outside-collaborators-exemption %}
|
||||||
|
|
||||||
Before enabling SAML SSO for your organization, you'll need to connect your IdP to your organization. For more information, see "[Connecting your identity provider to your organization](/organizations/managing-saml-single-sign-on-for-your-organization/connecting-your-identity-provider-to-your-organization)."
|
Before enabling SAML SSO for your organization, you'll need to connect your IdP to your organization. For more information, see "[Connecting your identity provider to your organization](/organizations/managing-saml-single-sign-on-for-your-organization/connecting-your-identity-provider-to-your-organization)."
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: About SCIM
|
title: About SCIM
|
||||||
intro: 'With System for Cross-domain Identity Management (SCIM), administrators can automate the exchange of user identity information between systems.'
|
intro: 'With System for Cross-domain Identity Management (SCIM), administrators can automate the exchange of user identity information between systems.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/about-scim
|
- /articles/about-scim
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/about-scim
|
- /github/setting-up-and-managing-organizations-and-teams/about-scim
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
@@ -19,7 +17,7 @@ If you use [SAML SSO](/articles/about-identity-and-access-management-with-saml-s
|
|||||||
|
|
||||||
If you use SAML SSO without implementing SCIM, you won't have automatic deprovisioning. When organization members' sessions expire after their access is removed from the IdP, they aren't automatically removed from the organization. Authorized tokens grant access to the organization even after their sessions expire. To remove access, organization administrators can either manually remove the authorized token from the organization or automate its removal with SCIM.
|
If you use SAML SSO without implementing SCIM, you won't have automatic deprovisioning. When organization members' sessions expire after their access is removed from the IdP, they aren't automatically removed from the organization. Authorized tokens grant access to the organization even after their sessions expire. To remove access, organization administrators can either manually remove the authorized token from the organization or automate its removal with SCIM.
|
||||||
|
|
||||||
These identity providers are compatible with the {% data variables.product.product_name %} SCIM API for organizations. For more information, see [SCIM](/rest/reference/scim) in the {% ifversion fpt or ghec %}{% data variables.product.prodname_dotcom %}{% else %}{% data variables.product.product_name %}{% endif %} API documentation.
|
These identity providers are compatible with the {% data variables.product.product_name %} SCIM API for organizations. For more information, see [SCIM](/rest/reference/scim) in the {% ifversion ghec %}{% data variables.product.prodname_dotcom %}{% else %}{% data variables.product.product_name %}{% endif %} API documentation.
|
||||||
- Azure AD
|
- Azure AD
|
||||||
- Okta
|
- Okta
|
||||||
- OneLogin
|
- OneLogin
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: Accessing your organization if your identity provider is unavailable
|
title: Accessing your organization if your identity provider is unavailable
|
||||||
intro: 'Organization administrators can sign into {% data variables.product.product_name %} even if their identity provider is unavailable by bypassing single sign-on and using their recovery codes.'
|
intro: 'Organization administrators can sign into {% data variables.product.product_name %} even if their identity provider is unavailable by bypassing single sign-on and using their recovery codes.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/accessing-your-organization-if-your-identity-provider-is-unavailable
|
- /articles/accessing-your-organization-if-your-identity-provider-is-unavailable
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/accessing-your-organization-if-your-identity-provider-is-unavailable
|
- /github/setting-up-and-managing-organizations-and-teams/accessing-your-organization-if-your-identity-provider-is-unavailable
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: Configuring SAML single sign-on and SCIM using Okta
|
title: Configuring SAML single sign-on and SCIM using Okta
|
||||||
intro: 'You can use Security Assertion Markup Language (SAML) single sign-on (SSO) and System for Cross-domain Identity Management (SCIM) with Okta to automatically manage access to your organization on {% data variables.product.prodname_dotcom %}.'
|
intro: 'You can use Security Assertion Markup Language (SAML) single sign-on (SSO) and System for Cross-domain Identity Management (SCIM) with Okta to automatically manage access to your organization on {% data variables.product.product_location %}.'
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/configuring-saml-single-sign-on-and-scim-using-okta
|
- /github/setting-up-and-managing-organizations-and-teams/configuring-saml-single-sign-on-and-scim-using-okta
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
permissions: Organization owners can configure SAML SSO and SCIM using Okta for an organization.
|
permissions: Organization owners can configure SAML SSO and SCIM using Okta for an organization.
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
@@ -16,18 +14,18 @@ shortTitle: Configure SAML & SCIM with Okta
|
|||||||
|
|
||||||
## About SAML and SCIM with Okta
|
## About SAML and SCIM with Okta
|
||||||
|
|
||||||
You can control access to your {% data variables.product.prodname_dotcom %} organization and other web applications from one central interface by configuring the organization to use SAML SSO and SCIM with Okta, an Identity Provider (IdP).
|
You can control access to your organization on {% data variables.product.product_location %} and other web applications from one central interface by configuring the organization to use SAML SSO and SCIM with Okta, an Identity Provider (IdP).
|
||||||
|
|
||||||
SAML SSO controls and secures access to organization resources like repositories, issues, and pull requests. SCIM automatically adds, manages, and removes members' access to your {% data variables.product.prodname_dotcom %} organization when you make changes in Okta. For more information, see "[About identity and access management with SAML single sign-on](/organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on)" and "[About SCIM](/organizations/managing-saml-single-sign-on-for-your-organization/about-scim)."
|
SAML SSO controls and secures access to organization resources like repositories, issues, and pull requests. SCIM automatically adds, manages, and removes members' access to your organization on {% data variables.product.product_location %} when you make changes in Okta. For more information, see "[About identity and access management with SAML single sign-on](/organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on)" and "[About SCIM](/organizations/managing-saml-single-sign-on-for-your-organization/about-scim)."
|
||||||
|
|
||||||
After you enable SCIM, the following provisioning features are available for any users that you assign your {% data variables.product.prodname_ghe_cloud %} application to in Okta.
|
After you enable SCIM, the following provisioning features are available for any users that you assign your {% data variables.product.prodname_ghe_cloud %} application to in Okta.
|
||||||
|
|
||||||
| Feature | Description |
|
| Feature | Description |
|
||||||
| --- | --- |
|
| --- | --- |
|
||||||
| Push New Users | When you create a new user in Okta, the user will receive an email to join your {% data variables.product.prodname_dotcom %} organization. |
|
| Push New Users | When you create a new user in Okta, the user will receive an email to join your organization on {% data variables.product.product_location %}. |
|
||||||
| Push User Deactivation | When you deactivate a user in Okta, Okta will remove the user from your {% data variables.product.prodname_dotcom %} organization. |
|
| Push User Deactivation | When you deactivate a user in Okta, Okta will remove the user from your organization on {% data variables.product.product_location %}. |
|
||||||
| Push Profile Updates | When you update a user's profile in Okta, Okta will update the metadata for the user's membership in your {% data variables.product.prodname_dotcom %} organization. |
|
| Push Profile Updates | When you update a user's profile in Okta, Okta will update the metadata for the user's membership in your organization on {% data variables.product.product_location %}. |
|
||||||
| Reactivate Users | When you reactivate a user in Okta, Okta will send an email invitation for the user to rejoin your {% data variables.product.prodname_dotcom %} organization. |
|
| Reactivate Users | When you reactivate a user in Okta, Okta will send an email invitation for the user to rejoin your organization on {% data variables.product.product_location %}. |
|
||||||
|
|
||||||
## Prerequisites
|
## Prerequisites
|
||||||
|
|
||||||
@@ -41,7 +39,7 @@ After you enable SCIM, the following provisioning features are available for any
|
|||||||
4. To the right of "Github Enterprise Cloud - Organization", click **Add**.
|
4. To the right of "Github Enterprise Cloud - Organization", click **Add**.
|
||||||

|

|
||||||
|
|
||||||
5. In the **GitHub Organization** field, type the name of your {% data variables.product.prodname_dotcom %} organization. For example, if your organization's URL is https://github.com/octo-org, the organization name would be `octo-org`.
|
5. In the **GitHub Organization** field, type the name of your organization on {% data variables.product.product_location %}. For example, if your organization's URL is https://github.com/octo-org, the organization name would be `octo-org`.
|
||||||

|

|
||||||
|
|
||||||
6. Click **Done**.
|
6. Click **Done**.
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: Connecting your identity provider to your organization
|
title: Connecting your identity provider to your organization
|
||||||
intro: 'To use SAML single sign-on and SCIM, you must connect your identity provider to your {% data variables.product.product_name %} organization.'
|
intro: 'To use SAML single sign-on and SCIM, you must connect your identity provider to your {% data variables.product.product_name %} organization.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/connecting-your-identity-provider-to-your-organization
|
- /articles/connecting-your-identity-provider-to-your-organization
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/connecting-your-identity-provider-to-your-organization
|
- /github/setting-up-and-managing-organizations-and-teams/connecting-your-identity-provider-to-your-organization
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -5,9 +5,7 @@ redirect_from:
|
|||||||
- /articles/downloading-your-organization-s-saml-single-sign-on-recovery-codes
|
- /articles/downloading-your-organization-s-saml-single-sign-on-recovery-codes
|
||||||
- /articles/downloading-your-organizations-saml-single-sign-on-recovery-codes
|
- /articles/downloading-your-organizations-saml-single-sign-on-recovery-codes
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/downloading-your-organizations-saml-single-sign-on-recovery-codes
|
- /github/setting-up-and-managing-organizations-and-teams/downloading-your-organizations-saml-single-sign-on-recovery-codes
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: Enabling and testing SAML single sign-on for your organization
|
title: Enabling and testing SAML single sign-on for your organization
|
||||||
intro: Organization owners and admins can enable SAML single sign-on to add an extra layer of security to their organization.
|
intro: Organization owners and admins can enable SAML single sign-on to add an extra layer of security to their organization.
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/enabling-and-testing-saml-single-sign-on-for-your-organization
|
- /articles/enabling-and-testing-saml-single-sign-on-for-your-organization
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/enabling-and-testing-saml-single-sign-on-for-your-organization
|
- /github/setting-up-and-managing-organizations-and-teams/enabling-and-testing-saml-single-sign-on-for-your-organization
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
@@ -24,8 +22,6 @@ If you enable but don't enforce SAML SSO, organization members who choose not to
|
|||||||
|
|
||||||
## Enabling and testing SAML single sign-on for your organization
|
## Enabling and testing SAML single sign-on for your organization
|
||||||
|
|
||||||
{% data reusables.saml.saml-requires-ghec %}{% ifversion fpt %} {% data reusables.enterprise.link-to-ghec-trial %}{% endif %}
|
|
||||||
|
|
||||||
Before your enforce SAML SSO in your organization, ensure that you've prepared the organization. For more information, see "[Preparing to enforce SAML single sign-on in your organization](/articles/preparing-to-enforce-saml-single-sign-on-in-your-organization)."
|
Before your enforce SAML SSO in your organization, ensure that you've prepared the organization. For more information, see "[Preparing to enforce SAML single sign-on in your organization](/articles/preparing-to-enforce-saml-single-sign-on-in-your-organization)."
|
||||||
|
|
||||||
For more information about the identity providers (IdPs) that {% data variables.product.company_short %} supports for SAML SSO, see "[Connecting your identity provider to your organization](/organizations/managing-saml-single-sign-on-for-your-organization/connecting-your-identity-provider-to-your-organization)."
|
For more information about the identity providers (IdPs) that {% data variables.product.company_short %} supports for SAML SSO, see "[Connecting your identity provider to your organization](/organizations/managing-saml-single-sign-on-for-your-organization/connecting-your-identity-provider-to-your-organization)."
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: Enforcing SAML single sign-on for your organization
|
title: Enforcing SAML single sign-on for your organization
|
||||||
intro: Organization owners and admins can enforce SAML SSO so that all organization members must authenticate via an identity provider (IdP).
|
intro: Organization owners and admins can enforce SAML SSO so that all organization members must authenticate via an identity provider (IdP).
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/enforcing-saml-single-sign-on-for-your-organization
|
- /articles/enforcing-saml-single-sign-on-for-your-organization
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/enforcing-saml-single-sign-on-for-your-organization
|
- /github/setting-up-and-managing-organizations-and-teams/enforcing-saml-single-sign-on-for-your-organization
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -1,12 +1,11 @@
|
|||||||
---
|
---
|
||||||
title: Managing SAML single sign-on for your organization
|
title: Managing SAML single sign-on for your organization
|
||||||
intro: Organization administrators can manage organization members' identities and access to the organization with SAML single sign-on (SSO).
|
intro: Organization owners can manage organization members' identities and access to the organization with SAML single sign-on (SSO).
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/managing-member-identity-and-access-in-your-organization-with-saml-single-sign-on/
|
- /articles/managing-member-identity-and-access-in-your-organization-with-saml-single-sign-on/
|
||||||
- /articles/managing-saml-single-sign-on-for-your-organization
|
- /articles/managing-saml-single-sign-on-for-your-organization
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/managing-saml-single-sign-on-for-your-organization
|
- /github/setting-up-and-managing-organizations-and-teams/managing-saml-single-sign-on-for-your-organization
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -1,7 +1,6 @@
|
|||||||
---
|
---
|
||||||
title: Managing team synchronization for your organization
|
title: Managing team synchronization for your organization
|
||||||
intro: 'You can enable and disable team synchronization between your identity provider (IdP) and your organization on {% data variables.product.product_name %}.'
|
intro: 'You can enable and disable team synchronization between your identity provider (IdP) and your organization on {% data variables.product.product_name %}.'
|
||||||
product: '{% data reusables.gated-features.team-synchronization %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/synchronizing-teams-between-your-identity-provider-and-github
|
- /articles/synchronizing-teams-between-your-identity-provider-and-github
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/synchronizing-teams-between-your-identity-provider-and-github
|
- /github/setting-up-and-managing-organizations-and-teams/synchronizing-teams-between-your-identity-provider-and-github
|
||||||
@@ -10,7 +9,6 @@ redirect_from:
|
|||||||
permissions: Organization owners can manage team synchronization for an organization.
|
permissions: Organization owners can manage team synchronization for an organization.
|
||||||
miniTocMaxHeadingLevel: 3
|
miniTocMaxHeadingLevel: 3
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -1,12 +1,10 @@
|
|||||||
---
|
---
|
||||||
title: Preparing to enforce SAML single sign-on in your organization
|
title: Preparing to enforce SAML single sign-on in your organization
|
||||||
intro: 'Before you enforce SAML single sign-on in your organization, you should verify your organization''s membership and configure the connection settings to your identity provider.'
|
intro: 'Before you enforce SAML single sign-on in your organization, you should verify your organization''s membership and configure the connection settings to your identity provider.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /articles/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
- /articles/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
- /github/setting-up-and-managing-organizations-and-teams/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -1,9 +1,7 @@
|
|||||||
---
|
---
|
||||||
title: Troubleshooting identity and access management
|
title: Troubleshooting identity and access management
|
||||||
intro: 'Review and resolve common troubleshooting errors for managing your organization''s SAML SSO, team synchronization, or identity provider (IdP) connection.'
|
intro: 'Review and resolve common troubleshooting errors for managing your organization''s SAML SSO, team synchronization, or identity provider (IdP) connection.'
|
||||||
product: '{% data reusables.gated-features.saml-sso %}'
|
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
- Organizations
|
- Organizations
|
||||||
|
|||||||
@@ -25,7 +25,7 @@ Only organization owners and maintainers of a parent team can create a new child
|
|||||||
{% data reusables.organizations.team_name %}
|
{% data reusables.organizations.team_name %}
|
||||||
{% data reusables.organizations.team_description %}
|
{% data reusables.organizations.team_description %}
|
||||||
{% data reusables.organizations.create-team-choose-parent %}
|
{% data reusables.organizations.create-team-choose-parent %}
|
||||||
{% ifversion fpt or ghec %}
|
{% ifversion ghec %}
|
||||||
1. Optionally, if your organization or enterprise account uses team synchronization or your enterprise uses {% data variables.product.prodname_emus %}, connect an identity provider group to your team.
|
1. Optionally, if your organization or enterprise account uses team synchronization or your enterprise uses {% data variables.product.prodname_emus %}, connect an identity provider group to your team.
|
||||||
* If your enterprise uses {% data variables.product.prodname_emus %}, use the "Identity Provider Groups" drop-down menu, and select a single identity provider group to connect to the new team. For more information, "[Managing team memberships with identity provider groups](/enterprise-cloud@latest/admin/authentication/managing-your-enterprise-users-with-your-identity-provider/managing-team-memberships-with-identity-provider-groups)."
|
* If your enterprise uses {% data variables.product.prodname_emus %}, use the "Identity Provider Groups" drop-down menu, and select a single identity provider group to connect to the new team. For more information, "[Managing team memberships with identity provider groups](/enterprise-cloud@latest/admin/authentication/managing-your-enterprise-users-with-your-identity-provider/managing-team-memberships-with-identity-provider-groups)."
|
||||||
* If your organization or enterprise account uses team synchronization, use the "Identity Provider Groups" drop-down menu, and select up to five identity provider groups to connect to the new team. For more information, see "[Synchronizing a team with an identity provider group](/organizations/organizing-members-into-teams/synchronizing-a-team-with-an-identity-provider-group)."
|
* If your organization or enterprise account uses team synchronization, use the "Identity Provider Groups" drop-down menu, and select up to five identity provider groups to connect to the new team. For more information, see "[Synchronizing a team with an identity provider group](/organizations/organizing-members-into-teams/synchronizing-a-team-with-an-identity-provider-group)."
|
||||||
|
|||||||
@@ -3,10 +3,8 @@ title: Synchronizing a team with an identity provider group
|
|||||||
intro: 'You can synchronize a {% data variables.product.product_name %} team with an identity provider (IdP) group to automatically add and remove team members.'
|
intro: 'You can synchronize a {% data variables.product.product_name %} team with an identity provider (IdP) group to automatically add and remove team members.'
|
||||||
redirect_from:
|
redirect_from:
|
||||||
- /github/setting-up-and-managing-organizations-and-teams/synchronizing-a-team-with-an-identity-provider-group
|
- /github/setting-up-and-managing-organizations-and-teams/synchronizing-a-team-with-an-identity-provider-group
|
||||||
product: '{% data reusables.gated-features.team-synchronization %} '
|
|
||||||
permissions: 'Organization owners and team maintainers can synchronize a {% data variables.product.prodname_dotcom %} team with an IdP group.'
|
permissions: 'Organization owners and team maintainers can synchronize a {% data variables.product.prodname_dotcom %} team with an IdP group.'
|
||||||
versions:
|
versions:
|
||||||
fpt: '*'
|
|
||||||
ghae: '*'
|
ghae: '*'
|
||||||
ghec: '*'
|
ghec: '*'
|
||||||
topics:
|
topics:
|
||||||
@@ -21,15 +19,15 @@ shortTitle: Synchronize with an IdP
|
|||||||
|
|
||||||
{% data reusables.identity-and-permissions.about-team-sync %}
|
{% data reusables.identity-and-permissions.about-team-sync %}
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}You can connect up to five IdP groups to a {% data variables.product.product_name %} team.{% elsif ghae %}You can connect a team on {% data variables.product.product_name %} to one IdP group. All users in the group are automatically added to the team and also added to the parent organization as members. When you disconnect a group from a team, users who became members of the organization via team membership are removed from the organization.{% endif %} You can assign an IdP group to multiple {% data variables.product.product_name %} teams.
|
{% ifversion ghec %}You can connect up to five IdP groups to a {% data variables.product.product_name %} team.{% elsif ghae %}You can connect a team on {% data variables.product.product_name %} to one IdP group. All users in the group are automatically added to the team and also added to the parent organization as members. When you disconnect a group from a team, users who became members of the organization via team membership are removed from the organization.{% endif %} You can assign an IdP group to multiple {% data variables.product.product_name %} teams.
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}Team synchronization does not support IdP groups with more than 5000 members.{% endif %}
|
{% ifversion ghec %}Team synchronization does not support IdP groups with more than 5000 members.{% endif %}
|
||||||
|
|
||||||
Once a {% data variables.product.prodname_dotcom %} team is connected to an IdP group, your IdP administrator must make team membership changes through the identity provider. You cannot manage team membership on {% data variables.product.product_name %}{% ifversion fpt or ghec %} or using the API{% endif %}.
|
Once a {% data variables.product.prodname_dotcom %} team is connected to an IdP group, your IdP administrator must make team membership changes through the identity provider. You cannot manage team membership on {% data variables.product.product_name %}{% ifversion ghec %} or using the API{% endif %}.
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}{% data reusables.enterprise-accounts.team-sync-override %}{% endif %}
|
{% ifversion ghec %}{% data reusables.enterprise-accounts.team-sync-override %}{% endif %}
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}
|
{% ifversion ghec %}
|
||||||
All team membership changes made through your IdP will appear in the audit log on {% data variables.product.product_name %} as changes made by the team synchronization bot. Your IdP will send team membership data to {% data variables.product.prodname_dotcom %} once every hour.
|
All team membership changes made through your IdP will appear in the audit log on {% data variables.product.product_name %} as changes made by the team synchronization bot. Your IdP will send team membership data to {% data variables.product.prodname_dotcom %} once every hour.
|
||||||
Connecting a team to an IdP group may remove some team members. For more information, see "[Requirements for members of synchronized teams](#requirements-for-members-of-synchronized-teams)."
|
Connecting a team to an IdP group may remove some team members. For more information, see "[Requirements for members of synchronized teams](#requirements-for-members-of-synchronized-teams)."
|
||||||
{% endif %}
|
{% endif %}
|
||||||
@@ -42,9 +40,9 @@ Parent teams cannot synchronize with IdP groups. If the team you want to connect
|
|||||||
|
|
||||||
To manage repository access for any {% data variables.product.prodname_dotcom %} team, including teams connected to an IdP group, you must make changes with {% data variables.product.product_name %}. For more information, see "[About teams](/articles/about-teams)" and "[Managing team access to an organization repository](/articles/managing-team-access-to-an-organization-repository)."
|
To manage repository access for any {% data variables.product.prodname_dotcom %} team, including teams connected to an IdP group, you must make changes with {% data variables.product.product_name %}. For more information, see "[About teams](/articles/about-teams)" and "[Managing team access to an organization repository](/articles/managing-team-access-to-an-organization-repository)."
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}You can also manage team synchronization with the API. For more information, see "[Team synchronization](/rest/reference/teams#team-sync)."{% endif %}
|
{% ifversion ghec %}You can also manage team synchronization with the API. For more information, see "[Team synchronization](/rest/reference/teams#team-sync)."{% endif %}
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}
|
{% ifversion ghec %}
|
||||||
## Requirements for members of synchronized teams
|
## Requirements for members of synchronized teams
|
||||||
|
|
||||||
After you connect a team to an IdP group, team synchronization will add each member of the IdP group to the corresponding team on {% data variables.product.product_name %} only if:
|
After you connect a team to an IdP group, team synchronization will add each member of the IdP group to the corresponding team on {% data variables.product.product_name %} only if:
|
||||||
@@ -62,7 +60,7 @@ To avoid unintentionally removing team members, we recommend enforcing SAML SSO
|
|||||||
|
|
||||||
## Prerequisites
|
## Prerequisites
|
||||||
|
|
||||||
{% ifversion fpt or ghec %}
|
{% ifversion ghec %}
|
||||||
Before you can connect a {% data variables.product.product_name %} team with an identity provider group, an organization or enterprise owner must enable team synchronization for your organization or enterprise account. For more information, see "[Managing team synchronization for your organization](/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization)" and "[Managing team synchronization for organizations in your enterprise account](/enterprise-cloud@latest/admin/authentication/managing-identity-and-access-for-your-enterprise/managing-team-synchronization-for-organizations-in-your-enterprise)."
|
Before you can connect a {% data variables.product.product_name %} team with an identity provider group, an organization or enterprise owner must enable team synchronization for your organization or enterprise account. For more information, see "[Managing team synchronization for your organization](/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization)" and "[Managing team synchronization for organizations in your enterprise account](/enterprise-cloud@latest/admin/authentication/managing-identity-and-access-for-your-enterprise/managing-team-synchronization-for-organizations-in-your-enterprise)."
|
||||||
|
|
||||||
To avoid unintentionally removing team members, visit the administrative portal for your IdP and confirm that each current team member is also in the IdP groups that you want to connect to this team. If you don't have this access to your identity provider, you can reach out to your IdP administrator.
|
To avoid unintentionally removing team members, visit the administrative portal for your IdP and confirm that each current team member is also in the IdP groups that you want to connect to this team. If you don't have this access to your identity provider, you can reach out to your IdP administrator.
|
||||||
@@ -83,7 +81,7 @@ When you connect an IdP group to a {% data variables.product.product_name %} tea
|
|||||||
{% data reusables.user_settings.access_org %}
|
{% data reusables.user_settings.access_org %}
|
||||||
{% data reusables.organizations.specific_team %}
|
{% data reusables.organizations.specific_team %}
|
||||||
{% data reusables.organizations.team_settings %}
|
{% data reusables.organizations.team_settings %}
|
||||||
{% ifversion fpt or ghec %}
|
{% ifversion ghec %}
|
||||||
6. Under "Identity Provider Groups", use the drop-down menu, and select up to 5 identity provider groups.
|
6. Under "Identity Provider Groups", use the drop-down menu, and select up to 5 identity provider groups.
|
||||||
{% elsif ghae %}
|
{% elsif ghae %}
|
||||||
6. Under "Identity Provider Group", use the drop-down menu, and select an identity provider group from the list.
|
6. Under "Identity Provider Group", use the drop-down menu, and select an identity provider group from the list.
|
||||||
@@ -98,7 +96,7 @@ If you disconnect an IdP group from a {% data variables.product.prodname_dotcom
|
|||||||
{% data reusables.user_settings.access_org %}
|
{% data reusables.user_settings.access_org %}
|
||||||
{% data reusables.organizations.specific_team %}
|
{% data reusables.organizations.specific_team %}
|
||||||
{% data reusables.organizations.team_settings %}
|
{% data reusables.organizations.team_settings %}
|
||||||
{% ifversion fpt or ghec %}
|
{% ifversion ghec %}
|
||||||
6. Under "Identity Provider Groups", to the right of the IdP group you want to disconnect, click {% octicon "x" aria-label="X symbol" %}.
|
6. Under "Identity Provider Groups", to the right of the IdP group you want to disconnect, click {% octicon "x" aria-label="X symbol" %}.
|
||||||
{% elsif ghae %}
|
{% elsif ghae %}
|
||||||
6. Under "Identity Provider Group", to the right of the IdP group you want to disconnect, click {% octicon "x" aria-label="X symbol" %}.
|
6. Under "Identity Provider Group", to the right of the IdP group you want to disconnect, click {% octicon "x" aria-label="X symbol" %}.
|
||||||
|
|||||||
@@ -48,7 +48,7 @@ You can restrict who has access to a repository by choosing a repository's visib
|
|||||||
|
|
||||||
{% ifversion fpt or ghec or ghes %}
|
{% ifversion fpt or ghec or ghes %}
|
||||||
|
|
||||||
When you create a repository, you can choose to make the repository public or private.{% ifversion ghec or ghes %} If you're creating the repository in an organization{% ifversion ghec %} that is owned by an enterprise account{% endif %}, you can also choose to make the repository internal.{% endif %}{% endif %}{% ifversion fpt %} Repositories in organizations that use {% data variables.product.prodname_ghe_cloud %} can also be created with internal visibility. For more information, see "[About enterprise accounts](/enterprise-cloud@latest/admin/overview/about-enterprise-accounts)" in the {% data variables.product.prodname_ghe_cloud %} documentation.
|
When you create a repository, you can choose to make the repository public or private.{% ifversion ghec or ghes %} If you're creating the repository in an organization{% ifversion ghec %} that is owned by an enterprise account{% endif %}, you can also choose to make the repository internal.{% endif %}{% endif %}{% ifversion fpt %} Repositories in organizations that use {% data variables.product.prodname_ghe_cloud %} and are owned by an enterprise account can also be created with internal visibility. For more information, see [the {% data variables.product.prodname_ghe_cloud %} documentation](/enterprise-cloud@latest/repositories/creating-and-managing-repositories/about-repositories).
|
||||||
|
|
||||||
{% elsif ghae %}
|
{% elsif ghae %}
|
||||||
|
|
||||||
|
|||||||
@@ -19,7 +19,7 @@ To use this API, you must authenticate using a personal access token.
|
|||||||
|
|
||||||
If your `package_type` is `npm`, `maven`, `rubygems`, or `nuget`, then your token must also include the `repo` scope since your package inherits permissions from a {% data variables.product.prodname_dotcom %} repository. If your package is in the {% data variables.product.prodname_container_registry %}, then your `package_type` is `container` and your token does not need the `repo` scope to access or manage this `package_type`. `container` packages offer granular permissions separate from a repository. For more information, see "[About permissions for {% data variables.product.prodname_registry %}](/packages/learn-github-packages/about-permissions-for-github-packages#about-scopes-and-permissions-for-package-registries)."
|
If your `package_type` is `npm`, `maven`, `rubygems`, or `nuget`, then your token must also include the `repo` scope since your package inherits permissions from a {% data variables.product.prodname_dotcom %} repository. If your package is in the {% data variables.product.prodname_container_registry %}, then your `package_type` is `container` and your token does not need the `repo` scope to access or manage this `package_type`. `container` packages offer granular permissions separate from a repository. For more information, see "[About permissions for {% data variables.product.prodname_registry %}](/packages/learn-github-packages/about-permissions-for-github-packages#about-scopes-and-permissions-for-package-registries)."
|
||||||
|
|
||||||
If you want to use the {% data variables.product.prodname_registry %} API to access resources in an organization with SSO enabled, then you must enable SSO for your personal access token. For more information, see "[Authorizing a personal access token for use with SAML single sign-on](/github/authenticating-to-github/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on)."
|
If you want to use the {% data variables.product.prodname_registry %} API to access resources in an organization with SSO enabled, then you must enable SSO for your personal access token. For more information, see "[Authorizing a personal access token for use with SAML single sign-on](/github/authenticating-to-github/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
||||||
|
|
||||||
{% for operation in currentRestOperations %}
|
{% for operation in currentRestOperations %}
|
||||||
{% unless operation.subcategory %}{% include rest_operation %}{% endunless %}
|
{% unless operation.subcategory %}{% include rest_operation %}{% endunless %}
|
||||||
|
|||||||
@@ -1,5 +0,0 @@
|
|||||||
{% ifversion fpt %}
|
|
||||||
Internal repositories are available on {% data variables.product.prodname_ghe_cloud %} for organizations that are owned by an enterprise account and {% data variables.product.prodname_ghe_server %} 2.20+. For more information, see "[{% data variables.product.company_short %}'s products](/get-started/learning-about-github/githubs-products) and "[About enterprise accounts](/enterprise-cloud@latest/admin/overview/about-enterprise-accounts)" in the {% data variables.product.prodname_ghe_cloud %} documentation.
|
|
||||||
{% else %}
|
|
||||||
Internal repositories are available on {% data variables.product.prodname_ghe_cloud %} for organizations that are owned by an enterprise account{% ifversion ghae %}, {% data variables.product.prodname_ghe_managed %},{% endif %} and {% data variables.product.prodname_ghe_server %} 2.20+. For more information, see "[{% data variables.product.company_short %}'s products](/get-started/learning-about-github/githubs-products)" and "[About enterprise accounts](/admin/overview/about-enterprise-accounts)."
|
|
||||||
{% endif %}
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
SAML single sign-on is available with {% data variables.product.prodname_ghe_cloud %}{% ifversion ghae %} and {% data variables.product.prodname_ghe_managed %}{% endif %}. For more information, see "[GitHub's products](/articles/githubs-products)."
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
{% ifversion fpt or ghec %}Team synchronization is available for organizations and enterprise accounts using {% data variables.product.prodname_ghe_cloud %}. {% data reusables.gated-features.more-info-org-products %}{% elsif ghae %}Synchronization of teams with SCIM groups is available for organizations using {% data variables.product.prodname_ghe_managed %}. For more information, see "[GitHub's products](/github/getting-started-with-github/githubs-products)."{% endif %}
|
|
||||||
@@ -9,7 +9,7 @@ Organizations include:
|
|||||||
{% ifversion fpt or ghec %}
|
{% ifversion fpt or ghec %}
|
||||||
You can use organizations for free, with {% data variables.product.prodname_free_team %}, which includes unlimited collaborators on unlimited public repositories with full features, and unlimited private repositories with limited features.
|
You can use organizations for free, with {% data variables.product.prodname_free_team %}, which includes unlimited collaborators on unlimited public repositories with full features, and unlimited private repositories with limited features.
|
||||||
|
|
||||||
For additional features, including sophisticated user authentication and management, and improved support coverage, you can upgrade to {% data variables.product.prodname_team %} or {% data variables.product.prodname_ghe_cloud %}. {% data reusables.gated-features.more-info %}
|
For additional features, including SAML single sign-on and improved support coverage, you can upgrade to {% data variables.product.prodname_team %} or {% data variables.product.prodname_ghe_cloud %}. {% data reusables.gated-features.more-info %}
|
||||||
|
|
||||||
If you use {% data variables.product.prodname_ghe_cloud %}, you have the option to purchase a license for {% data variables.product.prodname_GH_advanced_security %} and use the features on private repositories. {% data reusables.advanced-security.more-info-ghas %}
|
If you use {% data variables.product.prodname_ghe_cloud %}, you have the option to purchase a license for {% data variables.product.prodname_GH_advanced_security %} and use the features on private repositories. {% data reusables.advanced-security.more-info-ghas %}
|
||||||
|
|
||||||
|
|||||||
@@ -1,3 +1,3 @@
|
|||||||
{% ifversion fpt or ghae or ghec %}
|
{% ifversion fpt or ghae or ghec %}
|
||||||
You can use team synchronization to automatically add and remove organization members to teams through an identity provider. For more information, see "[Synchronizing a team with an identity provider group](/organizations/organizing-members-into-teams/synchronizing-a-team-with-an-identity-provider-group)."
|
{% ifversion fpt %}Organizations that use {% data variables.product.prodname_ghe_cloud%}{% else %}You{% endif %} can use team synchronization to automatically add and remove organization members to teams through an identity provider. For more information, see "[Synchronizing a team with an identity provider group]({% ifversion fpt %}/enterprise-cloud@latest{% endif %}/organizations/organizing-members-into-teams/synchronizing-a-team-with-an-identity-provider-group){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
You can use internal repositories to practice "innersource" within your enterprise. Members of your enterprise can collaborate using open source methodologies without sharing proprietary information publicly{% ifversion ghes %}, even with private mode disabled{% endif %}.
|
{% ifversion ghec %}If your organization is owned by an enterprise account, you{% else %}You{% endif %} can use internal repositories to practice "innersource" within your enterprise. Members of your enterprise can collaborate using open source methodologies without sharing proprietary information publicly{% ifversion ghes %}, even with private mode disabled{% endif %}.
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
SAML single sign-on (SSO) gives organization owners and enterprise owners on {% data variables.product.prodname_dotcom %} a way to control and secure access to organization resources like repositories, issues, and pull requests.
|
SAML single sign-on (SSO) gives organization owners and enterprise owners using {% data variables.product.product_name %} a way to control and secure access to organization resources like repositories, issues, and pull requests.
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
If you configure SAML SSO, members of your {% data variables.product.prodname_dotcom %} organization will continue to log into their user accounts on {% data variables.product.prodname_dotcom %}. When a member accesses resources within your organization that uses SAML SSO, {% data variables.product.prodname_dotcom %} redirects the member to your IdP to authenticate. After successful authentication, your IdP redirects the member back to {% data variables.product.prodname_dotcom %}, where the member can access your organization's resources.
|
If you configure SAML SSO, members of your organization will continue to log into their user accounts on {% data variables.product.prodname_dotcom_the_website %}. When a member accesses resources within your organization that uses SAML SSO, {% data variables.product.prodname_dotcom %} redirects the member to your IdP to authenticate. After successful authentication, your IdP redirects the member back to {% data variables.product.prodname_dotcom %}, where the member can access your organization's resources.
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
If you belong to any organizations that enforce SAML single sign-on, you may be prompted to authenticate through your identity provider before you can authorize an {% data variables.product.prodname_oauth_app %}. For more information about SAML, see "[About authentication with SAML single sign-on](/github/authenticating-to-github/about-authentication-with-saml-single-sign-on)."
|
If you belong to any organizations that enforce SAML single sign-on, you may be prompted to authenticate through your identity provider before you can authorize an {% data variables.product.prodname_oauth_app %}. For more information about SAML, see "[About authentication with SAML single sign-on](/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/about-authentication-with-saml-single-sign-on){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
|
||||||
|
|||||||
@@ -271,4 +271,124 @@
|
|||||||
|
|
||||||
/github-ae@latest/admin/configuration/configuring-your-enterprise/initializing-github-ae
|
/github-ae@latest/admin/configuration/configuring-your-enterprise/initializing-github-ae
|
||||||
- /admin/configuration/configuring-your-enterprise/initializing-github-ae
|
- /admin/configuration/configuring-your-enterprise/initializing-github-ae
|
||||||
- /enterprise-server@latest/admin/configuration/configuring-your-enterprise/initializing-github-ae
|
- /enterprise-server@latest/admin/configuration/configuring-your-enterprise/initializing-github-ae
|
||||||
|
|
||||||
|
# FPT versioning for these files were removed as part of github/docs-content#4511
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization
|
||||||
|
- /articles/managing-member-identity-and-access-in-your-organization-with-saml-single-sign-on
|
||||||
|
- /articles/managing-saml-single-sign-on-for-your-organization
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/managing-saml-single-sign-on-for-your-organization
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on
|
||||||
|
- /articles/about-identity-and-access-management-with-saml-single-sign-on
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/about-identity-and-access-management-with-saml-single-sign-on
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/about-identity-and-access-management-with-saml-single-sign-on
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/about-scim
|
||||||
|
- /articles/about-scim
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/about-scim
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/about-scim
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/connecting-your-identity-provider-to-your-organization
|
||||||
|
- /articles/connecting-your-identity-provider-to-your-organization
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/connecting-your-identity-provider-to-your-organization
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/connecting-your-identity-provider-to-your-organization
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/configuring-saml-single-sign-on-and-scim-using-okta
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/configuring-saml-single-sign-on-and-scim-using-okta
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/configuring-saml-single-sign-on-and-scim-using-okta
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/enabling-and-testing-saml-single-sign-on-for-your-organization
|
||||||
|
- /articles/enabling-and-testing-saml-single-sign-on-for-your-organization
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/enabling-and-testing-saml-single-sign-on-for-your-organization
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/enabling-and-testing-saml-single-sign-on-for-your-organization
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
||||||
|
- /articles/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/enforcing-saml-single-sign-on-for-your-organization
|
||||||
|
- /articles/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/preparing-to-enforce-saml-single-sign-on-in-your-organization
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/enforcing-saml-single-sign-on-for-your-organization
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes
|
||||||
|
- /articles/downloading-your-organization-s-saml-single-sign-on-recovery-codes
|
||||||
|
- /articles/downloading-your-organizations-saml-single-sign-on-recovery-codes
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/downloading-your-organizations-saml-single-sign-on-recovery-codes
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization
|
||||||
|
- /articles/synchronizing-teams-between-your-identity-provider-and-github
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/synchronizing-teams-between-your-identity-provider-and-github
|
||||||
|
- /github/articles/synchronizing-teams-between-okta-and-github
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/managing-team-synchronization-for-your-organization
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable
|
||||||
|
- /articles/accessing-your-organization-if-your-identity-provider-is-unavailable
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/accessing-your-organization-if-your-identity-provider-is-unavailable
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/managing-saml-single-sign-on-for-your-organization/troubleshooting-identity-and-access-management
|
||||||
|
- /organizations/managing-saml-single-sign-on-for-your-organization/troubleshooting-identity-and-access-management
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/granting-access-to-your-organization-with-saml-single-sign-on
|
||||||
|
- /articles/granting-access-to-your-organization-with-saml-single-sign-on
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/granting-access-to-your-organization-with-saml-single-sign-on
|
||||||
|
- /organizations/granting-access-to-your-organization-with-saml-single-sign-on
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/granting-access-to-your-organization-with-saml-single-sign-on/managing-bots-and-service-accounts-with-saml-single-sign-on
|
||||||
|
- /articles/managing-bots-and-service-accounts-with-saml-single-sign-on
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/managing-bots-and-service-accounts-with-saml-single-sign-on
|
||||||
|
- /organizations/granting-access-to-your-organization-with-saml-single-sign-on/managing-bots-and-service-accounts-with-saml-single-sign-on
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization
|
||||||
|
- /articles/viewing-and-revoking-organization-members-authorized-access-tokens
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/viewing-and-revoking-organization-members-authorized-access-tokens
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/viewing-and-managing-a-members-saml-access-to-your-organization
|
||||||
|
- /organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/granting-access-to-your-organization-with-saml-single-sign-on/about-two-factor-authentication-and-saml-single-sign-on
|
||||||
|
- /articles/about-two-factor-authentication-and-saml-single-sign-on
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/about-two-factor-authentication-and-saml-single-sign-on
|
||||||
|
- /organizations/granting-access-to-your-organization-with-saml-single-sign-on/about-two-factor-authentication-and-saml-single-sign-on
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on
|
||||||
|
- /articles/authenticating-to-a-github-organization-with-saml-single-sign-on
|
||||||
|
- /articles/authenticating-with-saml-single-sign-on
|
||||||
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on
|
||||||
|
- /authentication/authenticating-with-saml-single-sign-on
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/about-authentication-with-saml-single-sign-on
|
||||||
|
- /articles/about-authentication-with-saml-single-sign-on
|
||||||
|
- /github/authenticating-to-github/about-authentication-with-saml-single-sign-on
|
||||||
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/about-authentication-with-saml-single-sign-on
|
||||||
|
- /authentication/authenticating-with-saml-single-sign-on/about-authentication-with-saml-single-sign-on
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
||||||
|
- /articles/authorizing-an-ssh-key-for-use-with-a-saml-single-sign-on-organization
|
||||||
|
- /articles/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
||||||
|
- /github/authenticating-to-github/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
||||||
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
||||||
|
- /authentication/authenticating-with-saml-single-sign-on/authorizing-an-ssh-key-for-use-with-saml-single-sign-on
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
||||||
|
- /articles/authorizing-a-personal-access-token-for-use-with-a-saml-single-sign-on-organization
|
||||||
|
- /articles/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
||||||
|
- /github/authenticating-to-github/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
||||||
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
||||||
|
- /authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/authentication/authenticating-with-saml-single-sign-on/viewing-and-managing-your-active-saml-sessions
|
||||||
|
- /articles/viewing-and-managing-your-active-saml-sessions
|
||||||
|
- /github/authenticating-to-github/viewing-and-managing-your-active-saml-sessions
|
||||||
|
- /github/authenticating-to-github/authenticating-with-saml-single-sign-on/viewing-and-managing-your-active-saml-sessions
|
||||||
|
- /authentication/authenticating-with-saml-single-sign-on/viewing-and-managing-your-active-saml-sessions
|
||||||
|
|
||||||
|
/enterprise-cloud@latest/organizations/organizing-members-into-teams/synchronizing-a-team-with-an-identity-provider-group
|
||||||
|
- /github/setting-up-and-managing-organizations-and-teams/synchronizing-a-team-with-an-identity-provider-group
|
||||||
|
- /organizations/organizing-members-into-teams/synchronizing-a-team-with-an-identity-provider-group
|
||||||
Reference in New Issue
Block a user