diff options
| author | James Edwards-Jones <jedwardsjones@gitlab.com> | 2019-05-24 16:34:24 +0700 |
|---|---|---|
| committer | James Edwards-Jones <jedwardsjones@gitlab.com> | 2019-05-24 16:34:24 +0700 |
| commit | 8520f950aa11b3557e43b90fd01206e2d2a9eeaf (patch) | |
| tree | 4577a92ea8e266acc9bd5a025a147387b66869d8 | |
| parent | 36e15a866df5ca70e9c8209925acad412f2c6538 (diff) | |
| download | gitlab-ce-ce-jej/unflag-group-saml-metadata.tar.gz | |
Group SAML docs explain metadata configurationce-jej/unflag-group-saml-metadata
| -rw-r--r-- | doc/user/group/saml_sso/index.md | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/doc/user/group/saml_sso/index.md b/doc/user/group/saml_sso/index.md index ee3137d032e..fa0b23bc192 100644 --- a/doc/user/group/saml_sso/index.md +++ b/doc/user/group/saml_sso/index.md @@ -15,7 +15,7 @@ SAML SSO for groups is used only as a convenient way to add users and does not s ## Configuring your Identity Provider 1. Navigate to the group and click **Settings > SAML SSO**. -1. Configure your SAML server using the **Assertion consumer service URL** and **Issuer**. See [your identity provider's documentation](#providers) for more details. +1. Configure your SAML server using the **Assertion consumer service URL** and **Issuer**. Alternatively GitLab provides [metadata XML configuration](#metadata-configuration). See [your identity provider's documentation](#providers) for more details. 1. Configure the SAML response to include a NameID that uniquely identifies each user. 1. Configure required assertions using the [table below](#assertions). 1. Once the identity provider is set up, move on to [configuring GitLab](#configuring-gitlab). @@ -42,6 +42,14 @@ GitLab.com uses the SAML NameID to identify users. The NameID element: | First Name | `first_name`, `firstname`, `firstName` | | | Last Name | `last_name`, `lastname`, `lastName` | | +## Metadata configuration + +GitLab provides metadata XML that can be used to configure your Identity Provider. + +1. Navigate to the group and click **Settings > SAML SSO**. +1. Copy the provided **GitLab metadata URL** +1. Follow your Identity Provider's documentation and paste the metadata URL when it is requested. + ## Configuring GitLab Once you've set up your identity provider to work with GitLab, you'll need to configure GitLab to use it for authentication: |