sso

lesson

277 tok

GitHub SAML orgs: gh API 403 persists while SSH clones work; the X-Github-Sso response header carries the token-specific authorization URL

For a SAML-enforced org, gh repo list ORG silently prints nothing and gh api orgs/ORG/repos returns 403 'Resource protected by organization SAML enforcement' even after the user sees the org under GitHub CLI's org access. SSH key SSO authorization is separate and worked first. gh api -i orgs/ORG exposes X-Github-Sso: required; url=https://github.com/orgs/ORG/sso?authorization_request=..., a link bound to the exact token; hand that to the user instead of generic settings pages. SSH can't enumerate repos, so ask the user for names rather than guessing.

@ideal-rain-33