GitHub - Authenticating with SAML single sign-on

You can authenticate to a GitHub organization with SAML single sign-on (SSO) and view your active sessions.

SAML single sign-on is available with GitHub Enterprise Cloud. For more information, see "GitHub's products."

  • About authentication with SAML single sign-on

    You can access an organization that uses SAML single sign-on (SSO) by authenticating through an identity provider (IdP). After you authenticate with the IdP successfully from GitHub, you must authorize any personal access token, SSH key, or OAuth App you would like to access the organization's resources.

  • Authorizing an SSH key for use with SAML single sign-on

    To use an SSH key with an organization that uses SAML single sign-on (SSO), you must first authorize the key.

  • Authorizing a personal access token for use with SAML single sign-on

    To use a personal access token with an organization that uses SAML single sign-on (SSO), you must first authorize the token. See Github Repository Authorization for more information.

  • Viewing and managing your active SAML sessions

    You can view and revoke your active SAML sessions in your security settings.

 

Github Repository Authorization

If you see the following Git error:

Git Error: https://github.com/<...>>/<GIT Repository>.git: git-upload-pack not permitted on “https://github.com/<...>>/<GIT Repository>.git"

Repository creds valid: false || <USER> || <Organization>

It is caused by the github repository not being properly authorized. In the case of private Github repositories and using SSO login configuration, you must authorize the repository while creating the github access token.

  1. In the upper-right corner of any page on GitHub, click your profile photo, then click Settings.

  2. In the left sidebar, click Developer settings.

  3. In the left sidebar, click Personal access tokens.

  4. Next to the token you would like to authorize, click Configure SSO.

  5. In the drop down menu, to the right of the organization you'd like to authorize the token for, click Authorize.