Small Scale Services: SAML Implementation Preparation

Overview

Remote engagement to prepare for implementing SAML, maximum half day. Training for configuring SAML with GitHub Enterprise. In depth overview of what to expect during and after your transition to SAML. Assistance preparing the communication to your organization with a proposed timeline. Get the resources you need to feel supported, and ensure your users will maintain access to the materials they need.

Target Audience

Customers intending to configure SAML authentication on GitHub

Key Features and Benefits

• Prepare to enable SAML, the safest and most recommended way to have users authenticate with GitHub
• Have a more accurate count of active users within your instances to use seats and manage permissions more efficiently

Delivery Methods

Remote

This offering is only available remotely.

Syllabus

• SAML overview
  • SAML basics
  • SAML flow
  • SAML as a single source of truth
• Organization design
  • Unique users and consolidation options
  • Infrastructure
  • SAML for each organization under an Enterprise account
  • Linking independently to SAML
  • Multiple or non-traditional SAML providers
  • SAML provider extras
• User identification, management, and clean up
  • Mapping SAML to GitHub IDs
  • SSO: Double sign on
  • No migration: users self map
  • Team Sync
  • Bots and Service accounts
  • Identifying integrations built with user tokens or keys
  • Solutions: outside collaborators, adding to SAML
  • Ensuring tokens and keys are registered against SAML verified users
  • Historical user mapping
  • Verified domains and email notifications
• SCIM (GitHub Enterprise Cloud only)
  • Automated provisioning/de-provisioning (additional step after integrating SAML, requires SCIM 2.0 Standard)
• Enable vs Enforce (GitHub Enterprise Cloud only)
  • Enforcement configuration
  • Enforcing session length
• Recommended roll-out plan
  • Recommended messaging to the broader organization and timeline to maintain uptime during transition
  • Coaching around user invite process
  • Communicate that users have a short window
• Debugging SAML Authentication
  • GitHub Enterprise Server Specific issues (when applicable)
• Walkthrough
  • Configure SAML, walk through your own set-up to configure SAML on the call

Business Outcomes

After this engagement, your team will be able to implement SAML to the active and unique users within your company.

Prerequisites

• Attendance of SAML Administrator and GitHub Administrator.
• Alternate instance (ex; dev, test, or staging) to test and demonstrate SAML flow without interrupting production