Git HTTP works with SSO Enforcement

app/controllers/projects/git_http_client_controller.rb

@@ -15,6 +15,7 @@ class Projects::GitHttpClientController < Projects::ApplicationController
   alias_method :authenticated_user, :actor
 
   # Git clients will not know what authenticity token to send along
+  skip_around_action :set_session_storage
   skip_before_action :verify_authenticity_token
   skip_before_action :repository
   before_action :authenticate_user

ee/changelogs/unreleased/jej-fix-git-http-with-sso-enforcement.yml

+---
+title: Fix Git over HTTP when using SAML SSO Enforcement
+merge_request: 13485
+author:
+type: fixed

ee/spec/requests/git_http_spec.rb

@@ -138,4 +138,19 @@ describe 'Git HTTP requests' do
       it_behaves_like 'pushes are allowed'
     end
   end
+
+  describe 'when SSO is enforced' do
+    let(:user) { create(:user) }
+    let(:group) { create(:group) }
+    let(:project) { create(:project, :repository, :private, group: group) }
+    let(:env) { { user: user.username, password: user.password } }
+    let(:path) { "#{project.full_path}.git" }
+
+    before do
+      project.add_developer(user)
+      create(:saml_provider, group: group, enforced_sso: true)
+    end
+
+    it_behaves_like 'pulls are allowed'
+  end
 end