How to automate organisation membership?

[benhatton-unsw-edu-au]

Hi all,

This might be a requirement more common to Higher Ed, so asking here first.

We are currently using SCIM provisioning to allow any university person (staff or student) to be automatically added to a default organisation - e.g. to allow any student to start using github under our campus program without a manual action to add them to the github organisation (joining the group that SCIM is driven from is self-service).

In parallel to this, we have multiple other github organisations under the enterprise account that are restricted - e.g. a research group's own repositories. SSO needs to be setup for each of these separately, and this is effortful.

I would like to establish SAML SSO once at the enterprise account level, but this will deactivate SCIM provisioning. Is there another way to achieve a default organisational assignment for any user that can SSO? I was looking at Team synchronisation, but this seems to require organisational membership first.

Enterprise Managed Users is not an option, as external collaboration is an important requirement.

Thanks.