...
setup of authentication, such as Shibboleth or Active Directory
note: if Shibboleth is used, any user with valid Tufts credentials has the potential for read access to internal repositories and additional care must be used to scope repository visibility and permissions to a suitable level
maintenance of related AD groups
specifically managing access for any cross-group collaborators
contacting Github support in the event of issues
...