Skip to content

G
gitlab-ce
Commit 711a897f authored by Mike Russo's avatar Mike Russo Committed by Kati Paizee
Browse files
Options

Integration docs, substitution fixes

parent 1af8722a
Show whitespace changes
Inline Side-by-side
Showing with 142 additions and 123 deletions
doc/integration/azure.md
View file @ 711a897f
...@@ -4,17 +4,19 @@ group: Integrations ...@@ -4,17 +4,19 @@ group: Integrations
info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
--- ---
# Microsoft Azure OAuth2 OmniAuth Provider **(FREE)** # Microsoft Azure OAuth 2.0 OmniAuth Provider **(FREE)**
NOTE: NOTE:
Per Microsoft, this provider uses the [older Azure Active Directory v1.0 endpoint](https://docs.microsoft.com/en-us/azure/active-directory/azuread-dev/v1-protocols-oauth-code). Per Microsoft, this provider uses the [older Azure Active Directory v1.0 endpoint](https://docs.microsoft.com/en-us/azure/active-directory/azuread-dev/v1-protocols-oauth-code).
Microsoft documentation suggests that you should use the [OpenID Connect protocol to use the v2 endpoints](../administration/auth/oidc.md#microsoft-azure) for new projects. Microsoft documentation suggests that you should use the [OpenID Connect protocol to use the v2 endpoints](../administration/auth/oidc.md#microsoft-azure) for new projects.
To use v2 endpoints via OmniAuth, please follow [Microsoft Azure OAuth2 OmniAuth Provider v2 instructions](#microsoft-azure-oauth2-omniauth-provider-v2). To use v2 endpoints via OmniAuth, please follow [Microsoft Azure OAuth 2.0 OmniAuth Provider v2 instructions](#microsoft-azure-oauth-20-omniauth-provider-v2).
To enable the Microsoft Azure OAuth2 OmniAuth provider, you must register your application with Azure. Azure generates a client ID and secret key for you to use. To enable the Microsoft Azure OAuth 2.0 OmniAuth provider, you must register
your application with Azure. Azure generates a client ID and secret key for you
to use.
Sign in to the [Azure Portal](https://portal.azure.com), and follow the instructions in Sign in to the [Azure Portal](https://portal.azure.com), and follow the
the [Microsoft Quickstart documentation](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app). instructions in the [Microsoft Quickstart documentation](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app).
As you go through the Microsoft procedure, keep the following in mind: As you go through the Microsoft procedure, keep the following in mind:
...@@ -23,9 +25,9 @@ As you go through the Microsoft procedure, keep the following in mind: ...@@ -23,9 +25,9 @@ As you go through the Microsoft procedure, keep the following in mind:
- The redirect URI requires the URL of the Azure OAuth callback of your GitLab - The redirect URI requires the URL of the Azure OAuth callback of your GitLab
installation. For example, `https://gitlab.mycompany.com/users/auth/azure_oauth2/callback`. installation. For example, `https://gitlab.mycompany.com/users/auth/azure_oauth2/callback`.
The type dropdown should be set to **Web**. The type dropdown should be set to **Web**.
- The `client ID` and `client secret` are terms associated with OAuth 2. In some Microsoft documentation, - The `client ID` and `client secret` are terms associated with OAuth 2.0. In some Microsoft documentation,
the terms may be listed as `Application ID` and `Application Secret`. the terms may be listed as `Application ID` and `Application Secret`.
- If you need to generate a new client secret, follow the Microsoft documentation - If you have to generate a new client secret, follow the Microsoft documentation
for [creating a new application secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#create-a-new-application-secret). for [creating a new application secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#create-a-new-application-secret).
- Save the client ID and client secret for your new app, as the client secret is only - Save the client ID and client secret for your new app, as the client secret is only
displayed one time. displayed one time.
...@@ -89,41 +91,46 @@ As you go through the Microsoft procedure, keep the following in mind: ...@@ -89,41 +91,46 @@ As you go through the Microsoft procedure, keep the following in mind:
- *If you installed from source,* - *If you installed from source,*
[restart GitLab](../administration/restart_gitlab.md#installations-from-source). [restart GitLab](../administration/restart_gitlab.md#installations-from-source).
On the sign-in page, you should now see a Microsoft icon below the regular sign-in form. On the sign-in page, you should now see a Microsoft icon below the regular
Click the icon to begin the authentication process. Microsoft then asks you to sign-in form. Click the icon to begin the authentication process. Microsoft then
sign in and authorize the GitLab application. If successful, you are returned to GitLab and signed in. asks you to sign in and authorize the GitLab application. If successful, you are
returned to GitLab and signed in.
Read [Enable OmniAuth for an Existing User](omniauth.md#enable-omniauth-for-an-existing-user) Read [Enable OmniAuth for an Existing User](omniauth.md#enable-omniauth-for-an-existing-user)
for information on how existing GitLab users can connect to their newly-available Azure AD accounts. for information on how existing GitLab users can connect to their newly-available Azure AD accounts.
## Microsoft Azure OAuth2 OmniAuth Provider v2 ## Microsoft Azure OAuth 2.0 OmniAuth Provider v2
In order to use v2 endpoints provided by Microsoft Azure Active Directory you must to configure it via Azure OAuth2 OmniAuth Provider v2. To use v2 endpoints provided by Microsoft Azure Active Directory you must to
configure it via Azure OAuth 2.0 OmniAuth Provider v2.
### Registering an Azure application ### Registering an Azure application
To enable the Microsoft Azure OAuth2 OmniAuth provider, you must register your application with Azure. Azure generates a client ID and secret key for you to use. To enable the Microsoft Azure OAuth 2.0 OmniAuth provider, you must register
your application with Azure. Azure generates a client ID and secret key for you
to use.
Sign in to the [Azure Portal](https://portal.azure.com), and follow the instructions in Sign in to the [Azure Portal](https://portal.azure.com), and follow the
the [Microsoft Quickstart documentation](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app). instructions in the [Microsoft Quickstart documentation](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app).
As you go through the Microsoft procedure, keep the following in mind: As you go through the Microsoft procedure, keep the following in mind:
- If you have multiple instances of Azure Active Directory, you can switch to the desired tenant. - If you have multiple instances of Azure Active Directory, you can switch to
the desired tenant.
- You're setting up a Web application. - You're setting up a Web application.
- The redirect URI requires the URL of the Azure OAuth callback of your GitLab - The redirect URI requires the URL of the Azure OAuth callback of your GitLab
installation. For example, `https://gitlab.example.com/users/auth/azure_activedirectory_v2/callback`. installation. For example, `https://gitlab.example.com/users/auth/azure_activedirectory_v2/callback`.
The type dropdown should be set to **Web**. The type dropdown should be set to **Web**.
- The `client ID` and `client secret` are terms associated with OAuth 2. In some Microsoft documentation, - The `client ID` and `client secret` are terms associated with OAuth 2.0. In some Microsoft documentation,
the terms may be listed as `Application ID` and `Application Secret`. the terms may be listed as `Application ID` and `Application Secret`.
- If you need to generate a new client secret, follow the Microsoft documentation - If you have to generate a new client secret, follow the Microsoft documentation
for [creating a new application secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#create-a-new-application-secret). for [creating a new application secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#create-a-new-application-secret).
- Save the client ID and client secret for your new app, as the client secret is only - Save the client ID and client secret for your new app, as the client secret is only
displayed one time. displayed one time.
### Adding API permissions (scopes) ### Adding API permissions (scopes)
Once you have created an application, follow the [Microsoft Quickstart documentation to expose a web API](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-expose-web-apis). Be sure to add the following delegated permissions under the Microsoft Graph API: After you have created an application, follow the [Microsoft Quickstart documentation to expose a web API](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-expose-web-apis). Be sure to add the following delegated permissions under the Microsoft Graph API:
- `email` - `email`
- `openid` - `openid`
...@@ -181,7 +188,8 @@ Once you have created an application, follow the [Microsoft Quickstart documenta ...@@ -181,7 +188,8 @@ Once you have created an application, follow the [Microsoft Quickstart documenta
The `scope` parameter is optional and can be added to `args`. Default `scope` is: `openid profile email`. The `scope` parameter is optional and can be added to `args`. Default `scope` is: `openid profile email`.
1. Replace `CLIENT ID`, `CLIENT SECRET`, and `TENANT ID` with the values you got above. 1. Replace `CLIENT ID`, `CLIENT SECRET`, and `TENANT ID` with the values you got
above.
1. Save the configuration file. 1. Save the configuration file.
......
doc/integration/bitbucket.md
View file @ 711a897f
...@@ -10,8 +10,8 @@ NOTE: ...@@ -10,8 +10,8 @@ NOTE:
Starting from GitLab 11.4, OmniAuth is enabled by default. If you're using an Starting from GitLab 11.4, OmniAuth is enabled by default. If you're using an
earlier version, you must explicitly enable it. earlier version, you must explicitly enable it.
You can set up Bitbucket.org as an OAuth2 provider to use your You can set up Bitbucket.org as an OAuth 2.0 provider to use your Bitbucket.org
Bitbucket.org account credentials to sign in to GitLab, or import your projects from account credentials to sign in to GitLab. You can also import your projects from
Bitbucket.org. Bitbucket.org.
- To use Bitbucket.org as an OmniAuth provider, follow the - To use Bitbucket.org as an OmniAuth provider, follow the
......
doc/integration/oauth_provider.md
View file @ 711a897f
...@@ -4,17 +4,17 @@ group: Access ...@@ -4,17 +4,17 @@ group: Access
info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
--- ---
# GitLab as OAuth2 authentication service provider # GitLab as an OAuth 2.0 authentication service provider
This document describes how you can use GitLab as an OAuth 2 This document describes how you can use GitLab as an OAuth 2.0
authentication service provider. authentication service provider.
If you want to use: If you want to use:
- The [OAuth2](https://oauth.net/2/) protocol to access GitLab resources on user's behalf, - The [OAuth 2.0](https://oauth.net/2/) protocol to access GitLab resources on
see [OAuth2 provider](../api/oauth2.md). a user's behalf, see [OAuth 2.0 provider](../api/oauth2.md).
- Other OAuth 2 authentication service providers to sign in to - Other OAuth 2.0 authentication service providers to sign in to
GitLab, see the [OAuth2 client documentation](omniauth.md). GitLab, see the [OAuth 2.0 client documentation](omniauth.md).
- The related API, see [Applications API](../api/applications.md). - The related API, see [Applications API](../api/applications.md).
## Introduction to OAuth ## Introduction to OAuth
......
doc/integration/omniauth.md
View file @ 711a897f
...@@ -7,8 +7,8 @@ info: To determine the technical writer assigned to the Stage/Group associated w ...@@ -7,8 +7,8 @@ info: To determine the technical writer assigned to the Stage/Group associated w
# OmniAuth **(FREE)** # OmniAuth **(FREE)**
GitLab leverages OmniAuth to allow users to sign in using Twitter, GitHub, and GitLab leverages OmniAuth to allow users to sign in using Twitter, GitHub, and
other popular services. [OmniAuth](https://rubygems.org/gems/omniauth/) is other popular services. [OmniAuth](https://rubygems.org/gems/omniauth/) is a
"a generalized Rack framework for multiple-provider authentication, built on Ruby. "generalized Rack framework for multiple-provider authentication" built on Ruby.
Configuring OmniAuth does not prevent standard GitLab authentication or LDAP Configuring OmniAuth does not prevent standard GitLab authentication or LDAP
(if configured) from continuing to work. Users can choose to sign in using any (if configured) from continuing to work. Users can choose to sign in using any
...@@ -22,36 +22,38 @@ of the configured mechanisms. ...@@ -22,36 +22,38 @@ of the configured mechanisms.
## Supported Providers ## Supported Providers
This is a list of the current supported OmniAuth providers. Before proceeding on each provider's documentation, This is a list of the current supported OmniAuth providers. Before proceeding on
make sure to first read this document as it contains some settings that are common for all providers. each provider's documentation, make sure to first read this document as it
contains some settings that are common for all providers.
|Provider documentation |OmniAuth provider name |
|-----------------------------------------------------------------|--------------------------| | Provider documentation | OmniAuth provider name |
|[Atlassian Crowd](../administration/auth/crowd.md) |`crowd` | |---------------------------------------------------------------------|----------------------------|
|[Atlassian](../administration/auth/atlassian.md) |`atlassian_oauth2` | | [Atlassian Crowd](../administration/auth/crowd.md) | `crowd` |
|[Auth0](auth0.md) |`auth0` | | [Atlassian](../administration/auth/atlassian.md) | `atlassian_oauth2` |
|[Authentiq](../administration/auth/authentiq.md) |`authentiq` | | [Auth0](auth0.md) | `auth0` |
|[AWS Cognito](../administration/auth/cognito.md) |`cognito` | | [Authentiq](../administration/auth/authentiq.md) | `authentiq` |
|[Azure v2](azure.md#microsoft-azure-oauth2-omniauth-provider-v2) |`azure_activedirectory_v2`| | [AWS Cognito](../administration/auth/cognito.md) | `cognito` |
|[Azure v1](azure.md) |`azure_oauth2` | | [Azure v2](azure.md#microsoft-azure-oauth-20-omniauth-provider-v2) | `azure_activedirectory_v2` |
|[Bitbucket Cloud](bitbucket.md) |`bitbucket` | | [Azure v1](azure.md) | `azure_oauth2` |
|[CAS](cas.md) |`cas3` | | [Bitbucket Cloud](bitbucket.md) | `bitbucket` |
|[Facebook](facebook.md) |`facebook` | | [CAS](cas.md) | `cas3` |
|[Generic OAuth2](oauth2_generic.md) |`oauth2_generic` | | [Facebook](facebook.md) | `facebook` |
|[GitHub](github.md) |`github` | | [Generic OAuth 2.0](oauth2_generic.md) | `oauth2_generic` |
|[GitLab.com](gitlab.md) |`gitlab` | | [GitHub](github.md) | `github` |
|[Google](google.md) |`google_oauth2` | | [GitLab.com](gitlab.md) | `gitlab` |
|[JWT](../administration/auth/jwt.md) |`jwt` | | [Google](google.md) | `google_oauth2` |
|[Kerberos](kerberos.md) |`kerberos` | | [JWT](../administration/auth/jwt.md) | `jwt` |
|[OpenID Connect](../administration/auth/oidc.md) |`openid_connect` | | [Kerberos](kerberos.md) | `kerberos` |
|[Salesforce](salesforce.md) |`salesforce` | | [OpenID Connect](../administration/auth/oidc.md) | `openid_connect` |
|[SAML](saml.md) |`saml` | | [Salesforce](salesforce.md) | `salesforce` |
|[Shibboleth](shibboleth.md) |`shibboleth` | | [SAML](saml.md) | `saml` |
|[Twitter](twitter.md) |`twitter` | | [Shibboleth](shibboleth.md) | `shibboleth` |
| [Twitter](twitter.md) | `twitter` |
## Initial OmniAuth Configuration ## Initial OmniAuth Configuration
The OmniAuth provider names from the table above are needed to configure a few global settings that are in common for all providers. The OmniAuth provider names from the table above are needed to configure a few
global settings that are in common for all providers.
NOTE: NOTE:
Starting from GitLab 11.4, OmniAuth is enabled by default. If you're using an Starting from GitLab 11.4, OmniAuth is enabled by default. If you're using an
...@@ -65,7 +67,9 @@ earlier version, you must explicitly enable it. ...@@ -65,7 +67,9 @@ earlier version, you must explicitly enable it.
gitlab_rails['omniauth_allow_single_sign_on'] = ['azure_activedirectory_v2', 'google_oauth2'] gitlab_rails['omniauth_allow_single_sign_on'] = ['azure_activedirectory_v2', 'google_oauth2']
``` ```
The value defaults to `false`. If `false` users must be created manually, or they can't sign in by using OmniAuth. The value defaults to `false`. If `false` users must be created manually, or
they can't sign in by using OmniAuth.
- `auto_link_ldap_user` can be used if you have [LDAP / ActiveDirectory](../administration/auth/ldap/index.md) - `auto_link_ldap_user` can be used if you have [LDAP / ActiveDirectory](../administration/auth/ldap/index.md)
integration enabled. It defaults to `false`. When enabled, users automatically integration enabled. It defaults to `false`. When enabled, users automatically
created through an OmniAuth provider have their LDAP identity created in GitLab as well. created through an OmniAuth provider have their LDAP identity created in GitLab as well.
...@@ -166,23 +170,21 @@ Automatic linking using this method works for all providers ...@@ -166,23 +170,21 @@ Automatic linking using this method works for all providers
[except the SAML provider](https://gitlab.com/gitlab-org/gitlab/-/issues/338293). For automatic [except the SAML provider](https://gitlab.com/gitlab-org/gitlab/-/issues/338293). For automatic
linking using the SAML provider, see [SAML-specific](saml.md#general-setup) instructions. linking using the SAML provider, see [SAML-specific](saml.md#general-setup) instructions.
As an example, the following configuration is used to enable the auto link feature for both: As an example, the following configuration is used to enable the auto link
feature for both an **OpenID Connect provider** and a **Twitter OAuth provider**.
- OpenID Connect provider.
- Twitter OAuth provider.
**For Omnibus installations** - **For Omnibus installations**
```ruby ```ruby
gitlab_rails['omniauth_auto_link_user'] = ["openid_connect", "twitter"] gitlab_rails['omniauth_auto_link_user'] = ["openid_connect", "twitter"]
``` ```
**For installations from source** - **For installations from source**
```yaml ```yaml
omniauth: omniauth:
auto_link_user: ["openid_connect", "twitter"] auto_link_user: ["openid_connect", "twitter"]
``` ```
## Configure OmniAuth Providers as External ## Configure OmniAuth Providers as External
...@@ -197,18 +199,18 @@ If you decide to remove an OmniAuth provider from the external providers list, ...@@ -197,18 +199,18 @@ If you decide to remove an OmniAuth provider from the external providers list,
you must manually update the users that use this method to sign in if you want you must manually update the users that use this method to sign in if you want
their accounts to be upgraded to full internal accounts. their accounts to be upgraded to full internal accounts.
**For Omnibus installations** - **For Omnibus installations**
```ruby ```ruby
gitlab_rails['omniauth_external_providers'] = ['twitter', 'google_oauth2'] gitlab_rails['omniauth_external_providers'] = ['twitter', 'google_oauth2']
``` ```
**For installations from source** - **For installations from source**
```yaml ```yaml
omniauth: omniauth:
external_providers: ['twitter', 'google_oauth2'] external_providers: ['twitter', 'google_oauth2']
``` ```
## Using Custom OmniAuth Providers ## Using Custom OmniAuth Providers
...@@ -217,7 +219,7 @@ The following information only applies for installations from source. ...@@ -217,7 +219,7 @@ The following information only applies for installations from source.
GitLab uses [OmniAuth](https://github.com/omniauth/omniauth) for authentication and already ships GitLab uses [OmniAuth](https://github.com/omniauth/omniauth) for authentication and already ships
with a few providers pre-installed, such as LDAP, GitHub, and Twitter. You may also with a few providers pre-installed, such as LDAP, GitHub, and Twitter. You may also
need to integrate with other authentication solutions. For have to integrate with other authentication solutions. For
these cases, you can use the OmniAuth provider. these cases, you can use the OmniAuth provider.
### Steps ### Steps
...@@ -283,18 +285,18 @@ has an effect if providers are configured and [enabled](#enable-or-disable-sign- ...@@ -283,18 +285,18 @@ has an effect if providers are configured and [enabled](#enable-or-disable-sign-
If OmniAuth providers are causing problems even when individually disabled, you If OmniAuth providers are causing problems even when individually disabled, you
can disable the entire OmniAuth subsystem by modifying the configuration file: can disable the entire OmniAuth subsystem by modifying the configuration file:
**For Omnibus installations** - **For Omnibus installations**
```ruby ```ruby
gitlab_rails['omniauth_enabled'] = false gitlab_rails['omniauth_enabled'] = false
``` ```
**For installations from source** - **For installations from source**:
```yaml ```yaml
omniauth: omniauth:
enabled: false enabled: false
``` ```
## Keep OmniAuth user profiles up to date ## Keep OmniAuth user profiles up to date
...@@ -302,18 +304,20 @@ You can enable profile syncing from selected OmniAuth providers and for all or f ...@@ -302,18 +304,20 @@ You can enable profile syncing from selected OmniAuth providers and for all or f
When authenticating using LDAP, the user's name and email are always synced. When authenticating using LDAP, the user's name and email are always synced.
```ruby - **For Omnibus installations**
gitlab_rails['omniauth_sync_profile_from_provider'] = ['twitter', 'google_oauth2']
gitlab_rails['omniauth_sync_profile_attributes'] = ['name', 'email', 'location'] ```ruby
``` gitlab_rails['omniauth_sync_profile_from_provider'] = ['twitter', 'google_oauth2']
gitlab_rails['omniauth_sync_profile_attributes'] = ['name', 'email', 'location']
```
**For installations from source** - **For installations from source**
```yaml ```yaml
omniauth: omniauth:
sync_profile_from_provider: ['twitter', 'google_oauth2'] sync_profile_from_provider: ['twitter', 'google_oauth2']
sync_profile_attributes: ['email', 'location'] sync_profile_attributes: ['email', 'location']
``` ```
## Bypassing two factor authentication ## Bypassing two factor authentication
...@@ -325,16 +329,18 @@ or as `true` or `false` to allow all providers (or none). This option should be ...@@ -325,16 +329,18 @@ or as `true` or `false` to allow all providers (or none). This option should be
configured only for providers which already have two factor authentication configured only for providers which already have two factor authentication
(default: false). This configuration doesn't apply to SAML. (default: false). This configuration doesn't apply to SAML.
```ruby - **For Omnibus package**
gitlab_rails['omniauth_allow_bypass_two_factor'] = ['twitter', 'google_oauth2']
```
**For installations from source** ```ruby
gitlab_rails['omniauth_allow_bypass_two_factor'] = ['twitter', 'google_oauth2']
```
- **For installations from source**
```yaml ```yaml
omniauth: omniauth:
allow_bypass_two_factor: ['twitter', 'google_oauth2'] allow_bypass_two_factor: ['twitter', 'google_oauth2']
``` ```
## Automatically sign in with provider ## Automatically sign in with provider
...@@ -342,25 +348,25 @@ You can add the `auto_sign_in_with_provider` setting to your GitLab ...@@ -342,25 +348,25 @@ You can add the `auto_sign_in_with_provider` setting to your GitLab
configuration to redirect login requests to your OmniAuth provider for configuration to redirect login requests to your OmniAuth provider for
authentication. This removes the need to click a button before actually signing in. authentication. This removes the need to click a button before actually signing in.
For example, when using the [Azure v2 integration](azure.md#microsoft-azure-oauth2-omniauth-provider-v2), set the following to enable auto For example, when using the [Azure v2 integration](azure.md#microsoft-azure-oauth-20-omniauth-provider-v2), set the following to enable auto
sign-in: sign-in:
For Omnibus package: - **For Omnibus package**
```ruby ```ruby
gitlab_rails['omniauth_auto_sign_in_with_provider'] = 'azure_activedirectory_v2' gitlab_rails['omniauth_auto_sign_in_with_provider'] = 'azure_activedirectory_v2'
``` ```
For installations from source: - **For installations from source**
```yaml ```yaml
omniauth: omniauth:
auto_sign_in_with_provider: azure_activedirectory_v2 auto_sign_in_with_provider: azure_activedirectory_v2
``` ```
Keep in mind that every sign-in attempt is redirected to the OmniAuth Keep in mind that every sign-in attempt is redirected to the OmniAuth
provider; you can't sign in using local credentials. Ensure at least provider; you can't sign in using local credentials. Ensure at least
one of the OmniAuth users has administrator permissions. one of the OmniAuth users has an administrator role.
You may also bypass the auto sign in feature by browsing to You may also bypass the auto sign in feature by browsing to
`https://gitlab.example.com/users/sign_in?auto_sign_in=false`. `https://gitlab.example.com/users/sign_in?auto_sign_in=false`.
...@@ -378,18 +384,22 @@ After you ensure your image is optimized for rendering at 64 x 64 pixels, ...@@ -378,18 +384,22 @@ After you ensure your image is optimized for rendering at 64 x 64 pixels,
you can override this icon in one of two ways: you can override this icon in one of two ways:
- **Provide a custom image path**: - **Provide a custom image path**:
1. *If you are hosting the image outside of your GitLab server domain,* ensure 1. *If you are hosting the image outside of your GitLab server domain,* ensure
your [content security policies](https://docs.gitlab.com/omnibus/settings/configuration.html#content-security-policy) your [content security policies](https://docs.gitlab.com/omnibus/settings/configuration.html#content-security-policy)
are configured to allow access to the image file. are configured to allow access to the image file.
1. Depending on your method of installing GitLab, add a custom `icon` parameter 1. Depending on your method of installing GitLab, add a custom `icon` parameter
to your GitLab configuration file. Read [OpenID Connect OmniAuth provider](../administration/auth/oidc.md) to your GitLab configuration file. Read [OpenID Connect OmniAuth provider](../administration/auth/oidc.md)
for an example for the OpenID Connect provider. for an example for the OpenID Connect provider.
- **Directly embed an image in a configuration file**: This example creates a Base64-encoded - **Directly embed an image in a configuration file**: This example creates a Base64-encoded
version of your image you can serve through a version of your image you can serve through a
[Data URL](https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs): [Data URL](https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs):
1. Encode your image file with GNU `base64` command (such as `base64 -w 0 <logo.png>`) 1. Encode your image file with GNU `base64` command (such as `base64 -w 0 <logo.png>`)
which returns a single-line `<base64-data>` string. which returns a single-line `<base64-data>` string.
1. Add the Base64-encoded data to a custom `icon` parameter in your GitLab configuration file: 1. Add the Base64-encoded data to a custom `icon` parameter in your GitLab
configuration file:
```yaml ```yaml
omniauth: omniauth:
......
doc/integration/twitter.md
View file @ 711a897f
...@@ -4,9 +4,10 @@ group: Integrations ...@@ -4,9 +4,10 @@ group: Integrations
info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
--- ---
# Twitter OAuth2 OmniAuth Provider **(FREE)** # Twitter OAuth 2.0 OmniAuth Provider **(FREE)**
To enable the Twitter OmniAuth provider you must register your application with Twitter. Twitter generates a client ID and secret key for you to use. To enable the Twitter OmniAuth provider you must register your application with
Twitter. Twitter generates a client ID and secret key for you to use.
1. Sign in to [Twitter Application Management](https://developer.twitter.com/apps). 1. Sign in to [Twitter Application Management](https://developer.twitter.com/apps).
......
doc/user/project/clusters/runbooks/index.md
View file @ 711a897f
...@@ -63,7 +63,7 @@ information. ...@@ -63,7 +63,7 @@ information.
Follow this step-by-step guide to configure an executable runbook in GitLab using Follow this step-by-step guide to configure an executable runbook in GitLab using
the components outlined above and the pre-loaded demo runbook. the components outlined above and the pre-loaded demo runbook.
1. Create an [OAuth Application for JupyterHub](../../../../integration/oauth_provider.md#gitlab-as-oauth2-authentication-service-provider). 1. Create an [OAuth Application for JupyterHub](../../../../integration/oauth_provider.md#gitlab-as-an-oauth-20-authentication-service-provider).
1. When [installing JupyterHub with Helm](https://zero-to-jupyterhub.readthedocs.io/en/latest/jupyterhub/installation.html), use the following values 1. When [installing JupyterHub with Helm](https://zero-to-jupyterhub.readthedocs.io/en/latest/jupyterhub/installation.html), use the following values
```yaml ```yaml
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7