Skip to content

Commit 11d5b14

Browse files
stacycarterCopilotjusuchin85lecoursen
authored
Add troubleshooting section for GHEC Classic SCIM 'verified email address required' error (#61149)
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Justin Alex <1155821+jusuchin85@users.noreply.github.com> Co-authored-by: Laura Coursen <lecoursen@github.com>
1 parent 6b75f4b commit 11d5b14

1 file changed

Lines changed: 12 additions & 0 deletions

File tree

content/organizations/managing-saml-single-sign-on-for-your-organization/troubleshooting-identity-and-access-management-for-your-organization.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -94,6 +94,18 @@ To confirm that a user's SCIM identity is created, we recommend testing this pro
9494

9595
If re-provisioning SCIM for users doesn't help, please contact {% data variables.product.prodname_dotcom %} Support.
9696

97+
## Error: "A verified email address is required to invite members via email address"
98+
99+
This error can occur during SCIM provisioning when the {% data variables.product.prodname_dotcom %} user account that authorized the SCIM integration does not have a verified email address.
100+
101+
For organizations using supported SCIM IdPs, these types of integrations use an OAuth app. When you first configure the integration from the IdP admin portal, a {% data variables.product.prodname_dotcom %} user authorizes the OAuth app, and {% data variables.product.prodname_dotcom %} then performs all subsequent SCIM operations (including inviting new members) on behalf of that user. If that user's email address is no longer verified, SCIM provisioning calls for new users will fail with this error, while existing members remain unaffected.
102+
103+
### Resolving the error
104+
105+
1. Identify the {% data variables.product.prodname_dotcom %} user account that last authorized the SCIM integration. You can review `org.invite_member` events in your organization audit log to find the user account on whose behalf SCIM operations are performed.
106+
1. Log into that {% data variables.product.prodname_dotcom %} user account and verify the email address associated with the account. Only one {% data variables.product.prodname_dotcom %} account can verify a particular email address at a time. For more information, see [AUTOTITLE](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-email-preferences/verifying-your-email-address).
107+
1. After you verify the email, retry the SCIM provisioning operation from your identity provider.
108+
97109
## Conflicting SAML identity error
98110

99111
{% data reusables.saml.conflicting-identity %}

0 commit comments

Comments
 (0)