Entra SCIM Provisioning and Organization membership automation

[JinsengIT]

Select Topic Area

Question

Body

We use Microsoft Entra SCIM provisioning to add users to our GitHub Enterprise. It would streamline our processes if we could have people in specific Entra groups also be added as members of a specific organization in our enterprise. Is there any way to accomplish this? Ideally, I'm hoping there's a setting somewhere in the Enterprise IDP setup, Enterprise setup, or Org setup that says "Make members of xyz group a member of this organization." Any thoughts on how to do this would be greatly appreciated. Thank you.

[queenofcorgis]

Hi @JinsengIT - yes this is possible.

• In Entra ID, you will create an Enterprise Application for each GitHub organization you want to manage.
• You assign specific Entra ID groups (or users) to that Enterprise Application.
• With SCIM provisioning enabled, only the users and groups assigned to that app are automatically provisioned as members of the connected GitHub Enterprise organization.
• If you have multiple GitHub organizations, you need to set up a separate Enterprise Application (and SCIM connection) for each one, assigning the appropriate Entra ID groups/users to each.