Differences between revisions 1 and 5 (spanning 4 versions)
Revision 1 as of 2017-09-20 09:00:19
Size: 492
Editor: ?MichaelStapelberg
Comment:
Revision 5 as of 2017-10-21 13:22:20
Size: 868
Editor: ?MichaelStapelberg
Comment:
Deletions are marked like this. Additions are marked like this.
Line 5: Line 5:
   * stapelberg@ has a proof-of-concept GitLab installation which authenticates using OIDC (OpenID Connect Identity), the latest and greatest. Documentation can be found at https://michael.stapelberg.de/Artikel/gitlab-with-dex
  * we should use an existing oauth2 module, nothing custom
Line 7: Line 9:
  * as a fallback: enrico could implement basic user management/enrollment in sso.d.o

This page tracks the remaining work to make salsa.debian.org authenticate against sso.debian.org so that Debian Developers can easily log in without maintaining a separate account. Guest accounts should be possible, too.

  • Make GitLab authenticate against sso.debian.org

    • Anything which ?OmniAuth supports is fine. This includes OAuth2, SAML, Shibboleth.

    • we should use an existing oauth2 module, nothing custom
  • Have guest accounts available through sso.debian.org
    • TODO: ask luca about the status of the user management trial setup
    • as a fallback: enrico could implement basic user management/enrollment in sso.d.o