From 50a3ef4ca7b5fc6a8e699387831036929eef6e94 Mon Sep 17 00:00:00 2001 From: William Choe Date: Fri, 12 Jun 2026 13:23:53 -0600 Subject: [PATCH 1/5] Update setup user authentication instructions Clarified the requirements for signing in with setup user and the process for entering enterprise recovery codes. --- .../concepts/identity-and-access-management/setup-user.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/content/admin/concepts/identity-and-access-management/setup-user.md b/content/admin/concepts/identity-and-access-management/setup-user.md index 9d47ce1019a2..50bcce702e3d 100644 --- a/content/admin/concepts/identity-and-access-management/setup-user.md +++ b/content/admin/concepts/identity-and-access-management/setup-user.md @@ -36,6 +36,10 @@ Unlike provisioned managed users, the setup user cannot sign in via SSO. {% data reusables.enterprise-accounts.emu-password-reset-session %} +> [!NOTE] +> Once authentication has been configured on the enterprise, the setup user requires the [enterprise recovery codes](https://docs.github.com/en/enterprise-cloud@latest/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes) to be able to login. +> To enter the recovery codes, sign in as admin on the SSO prompt, enter username and password which will bring up the dialogue for recovery codes. + ## Can I delete the setup user? The setup user **cannot** be deleted, because it is essential for maintaining authentication and provisioning. The only way to remove the setup user is to delete your enterprise account. See [AUTOTITLE](/admin/managing-your-enterprise-account/deleting-an-enterprise-account). From 2a5926d4aef9ab12129a383a4154999a5f9c849e Mon Sep 17 00:00:00 2001 From: Sharra-writes Date: Fri, 12 Jun 2026 15:59:34 -0700 Subject: [PATCH 2/5] Apply suggestion from @Sharra-writes --- .../admin/concepts/identity-and-access-management/setup-user.md | 1 - 1 file changed, 1 deletion(-) diff --git a/content/admin/concepts/identity-and-access-management/setup-user.md b/content/admin/concepts/identity-and-access-management/setup-user.md index 50bcce702e3d..46eeaeaded46 100644 --- a/content/admin/concepts/identity-and-access-management/setup-user.md +++ b/content/admin/concepts/identity-and-access-management/setup-user.md @@ -38,7 +38,6 @@ Unlike provisioned managed users, the setup user cannot sign in via SSO. > [!NOTE] > Once authentication has been configured on the enterprise, the setup user requires the [enterprise recovery codes](https://docs.github.com/en/enterprise-cloud@latest/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes) to be able to login. -> To enter the recovery codes, sign in as admin on the SSO prompt, enter username and password which will bring up the dialogue for recovery codes. ## Can I delete the setup user? From 67eb29123a1c12da828467b066043ee49192f029 Mon Sep 17 00:00:00 2001 From: Sharra-writes Date: Tue, 16 Jun 2026 15:13:20 -0700 Subject: [PATCH 3/5] Apply suggestion from @Sharra-writes --- .../concepts/identity-and-access-management/setup-user.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/content/admin/concepts/identity-and-access-management/setup-user.md b/content/admin/concepts/identity-and-access-management/setup-user.md index 46eeaeaded46..556c9c3342cf 100644 --- a/content/admin/concepts/identity-and-access-management/setup-user.md +++ b/content/admin/concepts/identity-and-access-management/setup-user.md @@ -31,6 +31,13 @@ When you create the password, we strongly recommend that you **enable two-factor Unlike provisioned managed users, the setup user cannot sign in via SSO. +If you need to access enterprise recovery codes: +1. Navigate to github.com/login. +1. Enter the setup user's username (for example, shortcode_admin) and password. +1. Complete your 2FA challenge, or enter an enterprise recovery code if prompted. + +Enterprise recovery codes are not the same as personal two-factor authentication recovery codes. For more information, see [AUTOTITLE](/enterprise-cloud@latest/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes). + - **Without 2FA enabled**, you must provide an enterprise recovery code **every** time you sign in. - If **2FA is enabled**, you must sign in with a successful 2FA challenge response. You only need to enter an enterprise recovery code to access enterprise settings. From f8983e767e1b606c4a34067f53d6471ed0329a1a Mon Sep 17 00:00:00 2001 From: Sharra-writes Date: Tue, 16 Jun 2026 15:14:17 -0700 Subject: [PATCH 4/5] Apply suggestions from code review Co-authored-by: Sharra-writes --- .../admin/concepts/identity-and-access-management/setup-user.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/content/admin/concepts/identity-and-access-management/setup-user.md b/content/admin/concepts/identity-and-access-management/setup-user.md index 556c9c3342cf..9ae6efa54798 100644 --- a/content/admin/concepts/identity-and-access-management/setup-user.md +++ b/content/admin/concepts/identity-and-access-management/setup-user.md @@ -43,8 +43,6 @@ Enterprise recovery codes are not the same as personal two-factor authentication {% data reusables.enterprise-accounts.emu-password-reset-session %} -> [!NOTE] -> Once authentication has been configured on the enterprise, the setup user requires the [enterprise recovery codes](https://docs.github.com/en/enterprise-cloud@latest/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes) to be able to login. ## Can I delete the setup user? From b20142ff36639a10ff12bde1f7e85dfa43622bdc Mon Sep 17 00:00:00 2001 From: Sharra-writes Date: Tue, 16 Jun 2026 15:14:48 -0700 Subject: [PATCH 5/5] Apply suggestion from @Sharra-writes --- .../admin/concepts/identity-and-access-management/setup-user.md | 1 - 1 file changed, 1 deletion(-) diff --git a/content/admin/concepts/identity-and-access-management/setup-user.md b/content/admin/concepts/identity-and-access-management/setup-user.md index 9ae6efa54798..242f01a8edee 100644 --- a/content/admin/concepts/identity-and-access-management/setup-user.md +++ b/content/admin/concepts/identity-and-access-management/setup-user.md @@ -43,7 +43,6 @@ Enterprise recovery codes are not the same as personal two-factor authentication {% data reusables.enterprise-accounts.emu-password-reset-session %} - ## Can I delete the setup user? The setup user **cannot** be deleted, because it is essential for maintaining authentication and provisioning. The only way to remove the setup user is to delete your enterprise account. See [AUTOTITLE](/admin/managing-your-enterprise-account/deleting-an-enterprise-account).