---
title: "Revoke all credential authorizations for an organization"
method: POST
path: "/orgs/{org}/credential-authorizations/revoke-all"
tags: ["orgs"]
---

# Revoke all credential authorizations for an organization

`POST /orgs/{org}/credential-authorizations/revoke-all`

Revokes all SAML SSO credential authorizations for every member of the
organization. This removes the sign-in authorizations for personal access
tokens, SSH keys, OAuth app tokens, and user-to-server tokens that members
have authorized for the organization. Members will need to authorize their
credentials again to access the organization.

This operation is performed asynchronously. A background job will be queued to process
the revocations.

> [!WARNING]
> If you use a personal access token to call this endpoint, that token's
> authorization for the organization may also be revoked as part of this operation.

The authenticated user must be an organization owner to use this endpoint.

OAuth app tokens and personal access tokens (classic) need the `admin:org` scope to use this endpoint.

## Path parameters

- `org` string, required

## Response `202`

Accepted - The revocation request has been queued

- object
  - `message` string — A message indicating the revocation has been queued
  - `warning` string — A warning message if the token used for this request may be revoked

## Other responses

- `403` — Forbidden
- `404` — Resource not found

---

[API](https://skmtc.net/github/apis/enterprise-cloud.md) · [All operations](https://skmtc.net/github/apis/enterprise-cloud/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/enterprise-cloud/revisions/daeba3129b5f/schema)