We've stopped using the org accept invite endpoint of a user's token after hitting a lot of interesting edge cases.
In our latest source, we have a constant shouldAttemptAcceptingInvitations = false value in the code that should probably become a feature flag, or, a call whether to keep it or not.
What's nice when it works:
- Single click join
- Things just work for the user
What's not nice:
- Issues with SAML SSO at times
- Blocked invites issue from GitHub API at times