Skip to main content

Adding users to your enterprise

Add users to your enterprise and control access to your organization's resources.

The method of adding users to your enterprise and controlling authentication varies depending on the enterprise type that you chose.

Personal accounts

If you chose an enterprise with personal accounts, you will invite users to your enterprise with their existing GitHub account.

  1. In the top-right corner of GitHub, click your profile picture.
  2. Click Enterprises then click the enterprise you want to view.
  3. At the top of the page, click People.
  4. On the "Members" page, click Invite member.
  5. Search for the users you want to invite, then click Invite.

After you invite someone to join the enterprise account, they must accept the emailed invitation before they can access the enterprise account. Pending invitations will expire after 7 days.

Later in this onboarding journey, you will add users to teams to grant access to organizations and delegate administrative roles.

Enabling single sign-on for personal accounts

Single sign-on (SSO) gives organization owners and enterprise owners a way to control and secure access to organization resources like repositories, issues, and pull requests.

  1. Check if your SAML service is supported. See About identity and access management with SAML single sign-on.
  2. Decide whether to configure SAML for your enterprise account or for individual organizations. See Deciding whether to configure SAML for your enterprise or your organizations.
  3. If you're enabling SAML for the enterprise, you can do so now. See Configuring SAML single sign-on for your enterprise.

Enterprise Managed Users

With Enterprise Managed Users, you manage the lifecycle and authentication of your users on GitHub.com or GHE.com from an external identity management system, or IdP:

  • Your IdP provisions new user accounts on GitHub, with access to your enterprise.
  • Users must authenticate on your IdP to access your enterprise's resources on GitHub.
  • You control usernames, profile data, organization membership, and repository access from your IdP.
  • If your enterprise uses OIDC SSO, GitHub will validate access to your enterprise and its resources using your IdP's Conditional Access Policy (CAP).
  • Managed user accounts cannot create public content or collaborate outside your enterprise.

Get started with managed users

To use Enterprise Managed Users, you will:

  • Configure authentication using SAML or OIDC
  • Configure SCIM provisioning
  • Provision users to your enterprise

To get started, see Getting started with Enterprise Managed Users.

Next steps

Learn about how billing will work when your trial ends. See About enterprise billing.