summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDouwe Maan <douwe@gitlab.com>2019-05-24 12:36:21 +0000
committerDouwe Maan <douwe@gitlab.com>2019-05-24 12:36:21 +0000
commitc509b35b489ff69121c4760faa52d81e7666e9ca (patch)
treee61c88e82731a3c6191deedb0eebe3ba42359b5b
parent6b89b7cbcf1098831ffa06ea6700addba5a29ed5 (diff)
parent8520f950aa11b3557e43b90fd01206e2d2a9eeaf (diff)
downloadgitlab-ce-c509b35b489ff69121c4760faa52d81e7666e9ca.tar.gz
Merge branch 'ce-jej/unflag-group-saml-metadata' into 'master'
Group SAML docs explain metadata configuration See merge request gitlab-org/gitlab-ce!28700
-rw-r--r--doc/user/group/saml_sso/index.md10
1 files changed, 9 insertions, 1 deletions
diff --git a/doc/user/group/saml_sso/index.md b/doc/user/group/saml_sso/index.md
index 53116606201..778dbaf7a29 100644
--- a/doc/user/group/saml_sso/index.md
+++ b/doc/user/group/saml_sso/index.md
@@ -15,7 +15,7 @@ SAML SSO for groups is used only as a convenient way to add users and does not s
## Configuring your Identity Provider
1. Navigate to the group and click **Settings > SAML SSO**.
-1. Configure your SAML server using the **Assertion consumer service URL** and **Issuer**. See [your identity provider's documentation](#providers) for more details.
+1. Configure your SAML server using the **Assertion consumer service URL** and **Issuer**. Alternatively GitLab provides [metadata XML configuration](#metadata-configuration). See [your identity provider's documentation](#providers) for more details.
1. Configure the SAML response to include a NameID that uniquely identifies each user.
1. Configure required assertions using the [table below](#assertions).
1. Once the identity provider is set up, move on to [configuring GitLab](#configuring-gitlab).
@@ -50,6 +50,14 @@ GitLab.com uses the SAML NameID to identify users. The NameID element:
| First Name | `first_name`, `firstname`, `firstName` | |
| Last Name | `last_name`, `lastname`, `lastName` | |
+## Metadata configuration
+
+GitLab provides metadata XML that can be used to configure your Identity Provider.
+
+1. Navigate to the group and click **Settings > SAML SSO**.
+1. Copy the provided **GitLab metadata URL**
+1. Follow your Identity Provider's documentation and paste the metadata URL when it is requested.
+
## Configuring GitLab
Once you've set up your identity provider to work with GitLab, you'll need to configure GitLab to use it for authentication: