How to Retrieve Email Addresses from SAML Identity Provider

retrieve-email-saml-sso-idp.md

How to Retrieve Email Addresses from SAML SSO Identity Provider

Retrieve the email/login name of your developers on the GitHub Enterprise when authentication is through SAML SSO using your own identity provider such as Azure AD or Okta. The option you choose will depend on if you have single sign-on configured at the Organization level or at the Enterprise level.

You can try out the query first using the GraphQL Explorer before spending development effort.

Organization-Level SSO

query {
  organization(login: "<organization-name>") {
    samlIdentityProvider {
      ssoUrl
      externalIdentities(first: 100) {
        edges {
          node {
            guid
            samlIdentity {
              nameId
            }
            user {
              login
            }
          }
        }
      }
    }
  }
}

Enterprise-Level SSO

query {
  enterprise(slug: "<enterprise-slug>") {
    ownerInfo {
      samlIdentityProvider {
        externalIdentities(after: null, first: 100) {
          pageInfo {
            hasNextPage
            endCursor
          }
          edges {
            node {
              user {
                login
              }
              samlIdentity {
                nameId
              }
            }
          }
        }
      }
    }
  }
}