I've configured GitLab to work with my Authentik SSO:
gitlab_rails['omniauth_providers'] = [
{
name: 'saml',
label: 'Company SSO',
groups_attribute: 'Groups',
required_groups: ['gitlab_users'],
admin_groups: ['gitlab_admins'],
external_groups: ['gitlab_externals'],
auditor_groups: ['gitlab_auditors'],
},
}
]
I have defined some groups inside Authentik and mapped them to GitLab inside the config. If I try to login with a user to GitLab which has no group, it's denied as expected. If I set the users group, I can login. When I now delete the user again and assign the admins group, I can also login but I can not see any admin controls. Am I missing something?
I have followed this tutorial: https://docs.gitlab.com/ee/integration/saml.html
Asked by Mr. Jo
(203 rep)
Jan 18, 2025, 11:31 AM