Question

Contoso is adopting GitHub Enterprise Cloud and wants all developer identities to be fully controlled by their Azure AD tenant, so that accounts are automatically created and deprovisioned centrally and users cannot use these accounts for personal open-source contributions outside the company. The security team also requires that these accounts cannot exist or be used before the identity provider authenticates them. Which enterprise account type should Contoso choose to meet these requirements?

Accepted Answer

An enterprise with Enterprise Managed Users (EMU), where user accounts are provisioned and managed exclusively through the identity provider

Answer

A standard enterprise where members bring existing personal accounts and authenticate through SAML SSO

Answer

A standard enterprise with SAML SSO plus mandatory two-factor authentication enforced on all personal accounts

Answer

A standard enterprise where members are invited by email and required to enable SCIM on their personal accounts