Question

Your company uses a GitHub Enterprise Cloud account with Enterprise Managed Users (EMU) integrated with Azure AD (Entra ID) via SAML SSO and SCIM provisioning. An employee leaves the company, and the HR team removes them from the corporate identity provider. As the enterprise administrator, what happens to this user's GitHub account and access, and what is the correct expectation?

Accepted Answer

The managed user account is automatically suspended via SCIM deprovisioning, revoking their access to the enterprise's organizations and repositories.

Answer

The user retains full access until an administrator manually deletes the account from the enterprise settings, because SCIM only handles provisioning, not deprovisioning.

Answer

The user's account is immediately and permanently deleted along with all their contributions and repository history within the enterprise.

Answer

Nothing changes automatically; the administrator must revoke the SAML session and remove the user from each team individually to fully cut off access.