Yuksd

[Wuzhou99]

🏷️ Discussion Type

Question

💬 Feature/Topic Area

GitHub Nonprofits

Body

Authenticating with Enterprise Managed Users

Learn how to authenticate to access an enterprise with managed users on GitHub.

If you use a managed user account, you must authenticate through your identity provider (IdP) to access GitHub. The location where you can authenticate depends on whether your enterprise uses SAML or OIDC authentication.

Supported authentication locations

Authentication location	SAML	OIDC
IdP application portal
Login page on GitHub
The profile page for an organization or enterprise on GitHub

Authenticating via the login page

1. Navigate to https://github.com/login.
2. In the "Username or email address" text box, enter your username including the underscore and short code.
3. To continue to your IdP, click Sign in with your identity provider. @

[NicolasVitorP]

Hi there! It looks like your message cut off right at the end, but based on the documentation snippet you shared, you are looking into how Enterprise Managed Users (EMU) authenticate using their short codes.

Here is what you need to keep in mind to complete that process:

How the Sign-In Flow Works:
When you use an EMU account, your username follows a specific pattern: YOUR-IDENTITY_SHORTCODE (for example, johndoe_enterprise). As soon as you type that specific username (including the underscore and enterprise short code) into the standard GitHub login box, GitHub automatically recognizes that the account belongs to a managed enterprise. The standard password field will disappear, and a button reading "Sign in with your identity provider" will appear. Clicking that button will securely redirect you to your organization's IdP login screen (like Okta, Azure AD, or PingFederate) to complete the authentication.

Key Takeaway from the Table:
If your enterprise is using OIDC (OpenID Connect) instead of SAML, remember that Identity Provider Application Portals (like the Okta dashboard) cannot initiate the login. Users under OIDC configurations must start their login flow directly from GitHub.com or by navigating straight to their specific Enterprise/Organization profile URL.

If you were trying to tag someone or have a specific question about setting up the IdP or short codes for your nonprofit organization, feel free to drop it below!

[Wuzhou99]

Yaaa