docs/content/enterprise-onboarding/getting-started-with-your-enterprise/adding-users-to-your-enterprise.md

title, shortTitle, intro, versions, redirect_from

title	shortTitle	intro	versions	redirect_from
Adding users to your enterprise	Add users	Add users to your enterprise and control access to your organization's resources.	ghec *	/enterprise-onboarding/getting-started-with-your-enterprise/securing-enterprise-resources-with-single-sign-on /enterprise-onboarding/getting-started-with-your-enterprise/securing-your-enterprise-with-managed-users

The method of adding users to your enterprise and controlling authentication varies depending on the enterprise type that you chose.

Personal accounts

If you chose an enterprise with personal accounts, you will invite users to your enterprise with their existing {% data variables.product.github %} account.

{% data reusables.enterprise-onboarding.inviting-users-to-your-enterprise %}

Later in this onboarding journey, you will add users to teams to grant access to organizations and delegate administrative roles.

Enabling single sign-on for personal accounts

{% data reusables.saml.dotcom-saml-explanation %}

1. Check if your SAML service is supported. See AUTOTITLE.
2. Decide whether to configure SAML for your enterprise account or for individual organizations. See AUTOTITLE.
3. If you're enabling SAML for the enterprise, you can do so now. See AUTOTITLE.

{% data variables.product.prodname_emus %}

With {% data variables.product.prodname_emus %}, you manage the lifecycle and authentication of your users on {% data variables.product.prodname_dotcom_the_website %} or {% data variables.enterprise.data_residency_site %} from an external identity management system, or IdP:

• Your IdP provisions new user accounts on {% data variables.product.prodname_dotcom %}, with access to your enterprise.
• Users must authenticate on your IdP to access your enterprise's resources on {% data variables.product.prodname_dotcom %}.
• You control usernames, profile data, organization membership, and repository access from your IdP.
• If your enterprise uses OIDC SSO, {% data variables.product.prodname_dotcom %} will validate access to your enterprise and its resources using your IdP's Conditional Access Policy (CAP).
• {% data variables.enterprise.prodname_managed_users_caps %} cannot create public content or collaborate outside your enterprise.

Get started with managed users

To use {% data variables.product.prodname_emus %}, you will:

• Configure authentication using SAML or OIDC
• Configure SCIM provisioning
• Provision users to your enterprise

To get started, see AUTOTITLE.

Next steps

Learn about how billing will work when your trial ends. See AUTOTITLE.