First you need to tell GitLab where to look for group information. For this you
First you need to tell GitLab where to look for group information. For this you
...
@@ -189,7 +199,7 @@ The name of the attribute can be anything you like, but it must contain the grou
...
@@ -189,7 +199,7 @@ The name of the attribute can be anything you like, but it must contain the grou
to which a user belongs. In order to tell GitLab where to find these groups, you need
to which a user belongs. In order to tell GitLab where to find these groups, you need
to add a `groups_attribute:` element to your SAML settings.
to add a `groups_attribute:` element to your SAML settings.
### Required groups **(PREMIUM SELF)**
### Required groups **(FREE SELF)**
Your IdP passes Group Information to the SP (GitLab) in the SAML Response. You need to configure GitLab to identify:
Your IdP passes Group Information to the SP (GitLab) in the SAML Response. You need to configure GitLab to identify:
...
@@ -215,7 +225,7 @@ Example:
...
@@ -215,7 +225,7 @@ Example:
}}
}}
```
```
### External groups **(PREMIUM SELF)**
### External groups **(FREE SELF)**
SAML login supports automatic identification on whether a user should be considered an [external user](../user/permissions.md#external-users). This is based on the user's group membership in the SAML identity provider.
SAML login supports automatic identification on whether a user should be considered an [external user](../user/permissions.md#external-users). This is based on the user's group membership in the SAML identity provider.
...
@@ -233,7 +243,7 @@ SAML login supports automatic identification on whether a user should be conside
...
@@ -233,7 +243,7 @@ SAML login supports automatic identification on whether a user should be conside
}}
}}
```
```
### Admin groups **(PREMIUM SELF)**
### Admin groups **(FREE SELF)**
The requirements are the same as the previous settings, your IdP needs to pass Group information to GitLab, you need to tell
The requirements are the same as the previous settings, your IdP needs to pass Group information to GitLab, you need to tell
GitLab where to look for the groups in the SAML response, and which group(s) should be
GitLab where to look for the groups in the SAML response, and which group(s) should be