CGI SSO integration

Introducing CGI SSO for GitLab-Berlin #

To enhance the security of our GitLab environment, we have integrated CGI Single Sign-On (SSO) authentication. This change introduces an additional layer of protection and streamlines access for all users within the CGI enterprise network.

What does this mean for you?

For existing users: #

  • If your GitLab account uses the same email address as your CGI enterprise email, your account will be automatically linked to CGI SSO during your next login.
  • After linking, GitLab multifactor authentication (MFA) becomes optional, and you may disable it if you prefer.
  • If your email addresses do not match, or automatic linking is not possible, you will need to manually connect your GitLab account to CGI SSO by following these steps:
    • Sign in to https://gitlab.cgi-berlin.cloud with your GitLab credentials.
    • On the left sidebar, select your avatar.
    • Select Edit profile.
    • On the left sidebar, select Account.
    • In the Connected Accounts section, select the CGI as provider.

You are redirected to the provider. After you authorize GitLab, you are redirected back to GitLab.

edit_profile.png connect.png connected.png

You can now use your chosen “Sign in with CGI credential” to sign in to GitLab Berlin.

For new users: #

  • Simply log in with your CGI enterprise credentials at https://gitlab.cgi-berlin.cloud, and your GitLab account will be created and ready to use—no additional steps required.
If you experience any issues during the login or linking process, please contact your system administrator or the support team for assistance.

source:

https://docs.gitlab.com/integration/omniauth/#enable-omniauth-for-an-existing-user