Default Gitlab to fail closed on SAML login - Githubissues

defenseunicorns / uds-package-gitlab

🏭 UDS GitLab Zarf Package

Apache License 2.0

6 stars 3 forks source link

Default Gitlab to fail closed on SAML login #166

Closed ntwkninja closed 1 month ago

ntwkninja commented 1 month ago

Is your feature request related to a problem? Please describe.

If a required_group is not specific in the GitLab SAML configuration, any authenticated user can access the app.

If you do not set required_groups or leave the setting empty, anyone with proper authentication can use the service.

Describe the solution you'd like

Given a new user is registered to the SAML IdP
When they access gitlab.
Then access is denied

Describe alternatives you've considered

(optional) A clear and concise description of any alternative solutions or features you've considered.

Additional context