The SAML SSO app is a web based application and like any other Bitbucket SAML app, it does not allow authentication via command line tools.
In general, we recommend using a
SSH keys (https://confluence.atlassian.com/bitbucket/set-up-an-ssh-key-728138079.html) or personal access tokens for authentication.

SSH keys for authentication and personal access tokens do belong to a user, but don’t need to be changed,
if a user is renamed, so they can also be used with other external directories, like LDAP/ a Jira- or Crowd based directory)

Depending on your setup, there are different possibilities to perform Git operations with your Bitbucket Server, running the SAML SSO app:


If you are using external LDAP synchronization to sync & update users 

In this case, credentials will be synchronized to your Bitbucket instance, so the users can use their known username/ password for all Git operations

If you are using user creation and update provided by the SAML SSO app

If you are using the "User Creation and Update" function of our app, users won't really receive a password, as this is intended to be managed on the IdP only.
To enable the users to perform Git operations, there are three options: