GitLab Data Synchronization

Overview

This article describes how BambooCloud IDaaS synchronizes user information through the GitLab REST API. Group and organization synchronization are not currently supported.

Synchronization Configuration

GitLab Preparation

1. Generate a personal access token. Log in to GitLab, enter personal settings, select Access Tokens (with api permission), create and save the personal access token.

   

2. The GitLab service supports API access from BambooCloud IDaaS public cloud servers.

BambooCloud IDaaS Configuration

1. Log in to the Enterprise Center and add the GitLab synchronization pre-integrated application.

   

2. Configure authentication parameters. After the test passes, save.

   

   Parameter	Description
   Access Token	AccessTokens
   Synchronization Address	GitLab service address (domain or IP + port, starting with communication protocol "http://" or "https://")
   API Version	GitLab API version, v4 is recommended

3. Enter the application details, Authorization Management > Application Account, and add an account.

   

4. Edit account information.

   Parameter	Description
   Account Name	GitLab Username
   Name	GitLab Name
   Password	GitLab login password, at least 8 characters
   Confirm Password	Same as above
   Personal Email	GitLab Email
   External Provider Authentication Name	Corresponds to the provider of the GitLab user, the name of another authentication method (Note: required field for SAML authentication, its value is the identifier of BambooCloud IDaaS in GitLab, configured in the GitLab configuration file)
   External Provider Username	Corresponds to the extern_uid of the GitLab user, the username of another authentication method (Note: required field for SAML authentication, the default value should be the value of username)

5. When BambooCloud IDaaS synchronizes users to GitLab, and GitLab and BambooCloud IDaaS have SAML authentication integration. To ensure that users can SSO from BambooCloud IDaaS to GitLab, the synchronized users need to provide the provider and extern_uid fields (refer to the application document chapter). The value of provider is related to the SAML integration configuration between GitLab and BambooCloud IDaaS.

6. For the SAML integration configuration between GitLab and BambooCloud IDaaS, refer to BambooCloud IDaaS Developer Platform GitLab Authentication Configuration.

   

7. The value of provider is ultimately composed of label and name. name is fixed as the authentication protocol or method, and label can be changed freely. The format is: label(name), for example BambooCloud IDaaS(saml).

   

8. View synchronization records.

   

Synchronization Verification

1. For the first login of a synchronized user, activation is required via email. If not activated, the following message will be prompted.

   

   The administrator can also activate it.

   

2. After activation, log in with username + password or SAML authentication.