docs/data/reusables/saml/authorized-creds-info.md

Before you can authorize a personal access token or SSH key, you must have a linked SAML identity. If you're a member of an organization where SAML SSO is enabled, you can create a linked identity by authenticating to your organization with your IdP at least once. For more information, see "About authentication with SAML single sign-on."

After you authorize a personal access token or SSH key, the token or key will stay authorized until revoked in one of the following ways.

• An organization or enterprise owner revokes the authorization.
• You are removed from the organization.
• The scopes in a personal access token are edited, or the token is regenerated.
• The personal access token expired as defined during creation.