A GitHub Enterprise Cloud - Organization API authentication flow fails in Okta with an error indicating no results for users returned when the GitHub organization lacks an enabled Security Assertion Markup Language (SAML) Single Sign-On (SSO) configuration or when the GitHub service account becomes inactive. 

Okta is authenticating using an account with admin privileges on the GitHub side and has been authorized to connect to the GitHub account, as shown below:

The Okta dashboard displays the following error:

Error authenticating: No results for users returned

Resolve this issue by enabling SAML SSO in GitHub and reauthenticating the API integration in the Okta Admin Console. 

• Okta Identity Engine (OIE)
• Okta Classic Engine
• GitHub Enterprise Cloud - Organization
• Provisioning
• API Error

The error occurs because SAML SSO is not enabled for GitHub Enterprise Cloud - Organization, which is a prerequisite for integrating the application with Okta. The following image displays the SAML SSO prerequisite in the GitHub Enterprise Cloud - Organization documentation.

The error also occurs if the service account on GitHub used to set up provisioning is no longer active, possibly because it has been deleted or disabled.

How is the GitHub Enterprise Cloud Organization API authentication error resolved?

Enable Security Assertion Markup Language (SAML) Single Sign-On (SSO) in the GitHub organization settings using the Okta SAML setup instructions, reauthenticate the API integration in the Okta Admin Console, and verify the GitHub service account remains active.

1. Navigate to Applications > Applications in the Okta Admin Console.
2. Select the GitHub Enterprise Cloud - Organization application and select the Sign On tab.
3. Select View SAML Setup Instructions to view the instructions for enabling SAML within the GitHub organization account.
   
4. Sign in to GitHub Enterprise Cloud - Organization as the administrator of the GitHub organization and configure the SAML settings.
   1. Navigate to the organization settings, select Authentication security, and locate the SAML single sign-on section.
   2. Select the Enable SAML authentication checkbox.
   3. Copy and paste the Sign on URL, Issuer, and Public Certificate from the View SAML Setup Instructions link.
   4. Select Test SAML Configuration to test the SAML SSO configuration before enabling it.
   5. Select Save after a successful test configuration to apply the authentication security settings.
      
5. Navigate to Applications > Applications in the Okta Admin Console.
6. Select the GitHub Enterprise Cloud - Organization application.
7. Select the Provisioning tab and choose Integration in the Settings list.
8. Select Edit.
9. Select Authenticate with GitHub Enterprise Cloud - Organization to generate a token.
   
10. Enter the GitHub administrator account credentials in the GitHub sign-in window and select Sign in.
    
11. Select Authorize OktaOAN to grant access to the organization account.
    
12. Select Save after receiving a message confirming successful authentication.
    

NOTE: Ensure the GitHub service account used to set up the provisioning remains active and avoids deletion or deactivation. Contact GitHub support for further assistance if the issue persists.

Related References

• Configuring SAML single sign-on and SCIM using Okta