---
title: "Fix GitHub MCP 403: Resource protected by organization SAML (HTTP 403)"
slug: "github-403-saml-sso"
code: "HTTP 403"
category: "Authentication"
severity: "Medium"
canonical: "https://mcp-codex.com/errors/github-403-saml-sso"
source: "MCP Codex (https://mcp-codex.com)"
dateModified: "2026-09-28"
---

# Fix GitHub MCP 403: Resource protected by organization SAML (HTTP 403)

**Category**: Authentication | **Severity**: Medium

## Symptom
GitHub MCP server fails to read enterprise repositories with 403 Forbidden error.

## Root Cause
Your Personal Access Token (PAT) has not been authorized for SAML Single Sign-On (SSO) by the target GitHub Organization.

## Remediation & Quick Fix
Visit GitHub Settings → Personal Access Tokens → Click 'Configure SSO' next to your token and authorize it for your organization.

## OS Remediation Commands

### MAC
```bash
# Verify GitHub PAT authorization:
curl -H "Authorization: token ghp_..." https://api.github.com/user/orgs
```

### WINDOWS
```bash
# Verify GitHub PAT authorization:
curl.exe -H "Authorization: token ghp_..." https://api.github.com/user/orgs
```

### LINUX
```bash
# Verify GitHub PAT authorization:
curl -H "Authorization: token ghp_..." https://api.github.com/user/orgs
```

## Correct Configuration Example
```json
{
  "mcpServers": {
    "github": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/server-github"],
      "env": {
        "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_SAML_AUTHORIZED_TOKEN}"
      }
    }
  }
}
```

## Canonical Diagnostic Link
https://mcp-codex.com/errors/github-403-saml-sso

## Weekly Protocol & Patch Diffs
Subscribe to verified runtime fixes and schema changes: https://mcp-codex.com#newsletter