A GitHub Enterprise Cloud organization uses personal accounts, organization-level SAML, and team synchronization with Microsoft Entra ID. During an onboarding pilot, assigning first-time hires to the connected IdP group produces no GitHub invitation. Which change should automate the missing onboarding step?