Question

You administer a GitHub Enterprise Cloud organization backed by personal accounts (not EMU). Leadership requires all members to authenticate through the company's SAML identity provider. You enable and enforce SAML SSO for the organization. A developer complains that their existing personal access token (PAT) and SSH key suddenly stopped working against organization repositories, even though they can still sign in to github.com. What must the developer do to restore programmatic access?

Accepted Answer

Re-authenticate to the SAML IdP in the browser, then authorize the existing PAT and SSH key for use with SSO on the organization

Answer

Wait for the enterprise owner to disable IP allow lists, since SAML enforcement blocks all token traffic by default

Answer

Delete the personal account and have it re-provisioned as a managed user (EMU) so tokens are auto-authorized

Answer

Enable two-factor authentication on the personal account, which automatically re-validates all existing credentials for SSO