Differences between revisions 3 and 5 (spanning 2 versions)
Revision 3 as of 2017-10-03 21:17:27
Size: 767
Editor: ?MichaelStapelberg
Comment:
Revision 5 as of 2017-10-21 13:22:20
Size: 868
Editor: ?MichaelStapelberg
Comment:
Deletions are marked like this. Additions are marked like this.
Line 5: Line 5:
   * At least with SAML, OmniAuth login does not seem to work currently: https://gitlab.com/gitlab-org/gitlab-ce/issues/38738    * stapelberg@ has a proof-of-concept GitLab installation which authenticates using OIDC (OpenID Connect Identity), the latest and greatest. Documentation can be found at https://michael.stapelberg.de/Artikel/gitlab-with-dex

This page tracks the remaining work to make salsa.debian.org authenticate against sso.debian.org so that Debian Developers can easily log in without maintaining a separate account. Guest accounts should be possible, too.

  • Make GitLab authenticate against sso.debian.org

    • Anything which ?OmniAuth supports is fine. This includes OAuth2, SAML, Shibboleth.

    • we should use an existing oauth2 module, nothing custom
  • Have guest accounts available through sso.debian.org
    • TODO: ask luca about the status of the user management trial setup
    • as a fallback: enrico could implement basic user management/enrollment in sso.d.o