GitHub · GH-100
SAML, 2FA, and identity providers
GH-100 · Lesson 2 of 17 · 12:13
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-100 exam (GitHub Administration). In this lesson: SAML single sign-on at the organization or enterprise level, linked identities and what enforcement does to members, requiring two-factor authentication and secure methods only, supported identity providers for personal accounts and the partner providers for managed users (Entra ID, Okta, PingFederate), and choosing between SAML and OIDC with conditional access. Includes three original practice questions.
Preview the topics
- Contoso’s body organization enforced single sign-on this morning, and two engineers who never signed in through Entra ID lost their access. The owners want the same protection for all nine organizations, without removing anyone. What should they do?
- For its new enterprise with managed users, Contoso wants Entra ID for single sign-on, while HR wants Okta to provision the accounts through SCIM. What should the platform team know?
- Contoso wants the IP conditions of its Entra ID conditional access policy to apply every time a managed user’s personal access token or SSH key is used. Which configuration fits?