Projects under a group enforcing SSO should not be visible in the projects dashboard

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

  • Close this issue

Overview

The projects dashboard at /dashboard/projects provides a list of relevant projects that I belong to under the "All" tab. Currently, this includes projects that are in a group enforcing SSO.

While clicking on the project correctly routes the user to the SSO URL to sign on with the configured identity provider for that group, we should consider not showing these projects at all; listing these projects in the dashboard exposes some information about the project, and ideally we should not show it to an unauthenticated user who hasn't created a session with the connected identity provider.

Proposal

For projects in groups enforcing SSO, don't show them in the projects dashboard until the user has authenticated with the relevant identity provider for that group recently.

Edited Jul 02, 2025 by 🤖 GitLab Bot 🤖
Assignee Loading
Time tracking Loading