This page tracks the remaining work to make salsa.debian.org authenticate against sso.debian.org so that Debian Developers can easily log in without maintaining a separate account. Guest accounts should be possible, too.
Make ?GitLab authenticate against sso.debian.org
Anything which ?OmniAuth supports is fine. This includes OAuth2, SAML, Shibboleth.
stapelberg@ has a proof-of-concept ?GitLab installation which authenticates using OIDC (OpenID Connect Identity), the latest and greatest. Documentation can be found at https://michael.stapelberg.de/Artikel/gitlab-with-dex
- we should use an existing oauth2 module, nothing custom
- Have guest accounts available through sso.debian.org
- TODO: ask luca about the status of the user management trial setup
- as a fallback: enrico could implement basic user management/enrollment in sso.d.o