767
Comment:
|
868
|
Deletions are marked like this. | Additions are marked like this. |
Line 5: | Line 5: |
* At least with SAML, OmniAuth login does not seem to work currently: https://gitlab.com/gitlab-org/gitlab-ce/issues/38738 | * stapelberg@ has a proof-of-concept GitLab installation which authenticates using OIDC (OpenID Connect Identity), the latest and greatest. Documentation can be found at https://michael.stapelberg.de/Artikel/gitlab-with-dex |
This page tracks the remaining work to make salsa.debian.org authenticate against sso.debian.org so that Debian Developers can easily log in without maintaining a separate account. Guest accounts should be possible, too.
Make GitLab authenticate against sso.debian.org
Anything which ?OmniAuth supports is fine. This includes OAuth2, SAML, Shibboleth.
stapelberg@ has a proof-of-concept GitLab installation which authenticates using OIDC (OpenID Connect Identity), the latest and greatest. Documentation can be found at https://michael.stapelberg.de/Artikel/gitlab-with-dex
- we should use an existing oauth2 module, nothing custom
- Have guest accounts available through sso.debian.org
- TODO: ask luca about the status of the user management trial setup
- as a fallback: enrico could implement basic user management/enrollment in sso.d.o