What the provider parameters do is described in Overview; where the entry is written and how a change is applied is described on Configuration.

SAML provider

The parameters of a SAML provider and their effect are described in SAML.

  • Linux package
  • Omnibus Docker
  • Helm Chart
  • Deckhouse Kubernetes Platform module

A SAML provider is written as one more entry of the gitlab_rails['omniauth_providers'] array:

gitlab_rails['omniauth_providers'] = [
  {
    name: 'saml',
    allowed_groups: ['gitlab'],
    admin_groups: ['admin'],
    groups_attribute: 'gitlab_group'
  }
]
The entry is the one of the Linux package tab, written in /srv/code/config/gitlab.rb on the configuration volume.

A SAML entry is stored in a Secret and referenced from global.appConfig.omniauth.providers the same way as the OpenID Connect entry.

The provider is an entry of the providers parameter in the spec.appConfig.omniauth section:

providers:
  - name: 'saml'
    allowedGroups:
      - 'gitlab'
    adminGroups:
      - 'admin'
    groupsAttribute: 'gitlab_group'