A software company is planning its GitHub Enterprise Cloud deployment. Developers must be able to contribute to external open-source projects using the same GitHub identity, maintain personal repositories, and freely accept invitations to collaborate on repositories owned by other organizations outside the company. The security team also wants centralized SAML authentication but does NOT require that developer identities be fully managed and provisioned exclusively by the corporate IdP. Which deployment model best fits these requirements?