GitLab 14.0 Readiness - Enterprise Users (SaaS SSO)
Enterprise Users features incoming: gitlab-org&4786
Preventing password sign-in.
- This feature will be behind a feature flag, only enabled for a single customer's group (see related issue). It's possible that we'll enable for more groups.
- Prevent password reset if Enterprise account and feature flag enabled for the group: gitlab-org/gitlab#300191 (closed) MR gitlab-org/gitlab!59673 (merged)
- Prevent password sign in if Enterprise account and feature flag enabled for the group: MR 1 gitlab-org/gitlab!60912 (merged)
- Feature flag will be lifted when we have a way to validate domains and claim existing users. Timeline is TBD but ~14.5.
Preventing orphaned accounts:
- Relink users if provisioned by group ID matches and user account email matches email in SAML response
- via SCIM: gitlab-org/gitlab#298810 (closed)
Deprecating GMA:
- migrating existing customers off GMA: https://gitlab.com/gitlab-com/Product/-/issues/2368
Edited by Cynthia "Arty" Ng