Verify Group Link Configuration button

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Proposal

Many of our customers run into trouble when configuring Group link. Any mismatch in the configuration can cause our customer, specially on SaaS, to loose access to their groups. See !88064 (merged)

Currently there is no way to verify Group link configuration, other than the customer capturing SAML response manually and checking the group names.

The feature proposal is to add a button to Verify Group Link Configuration button just like the one we have on the SAML configuration. The button could query SAML, get the response and advice which of the configured groups the customer is part of.

Screen_Shot_2022-05-30_at_17.05.22

Solution

Based on the discussion in #363812 (comment 1881003000), the solution proposal is:

  • Re-use the same interactions as Verify SAML config.
  • We'd add a Verify Group Link Configuration button
  • A backend implementation that fetches a fresh SAML response, and then validates which of the group links correctly maps to a group
  • We'd display a checkmark beside the group links where we found a match
  • A list of unmatched groups will be displayed in a table underneath. Possibly titled, Groups without active group links detected. An info tool tip or a text in that box that indicates this isn't an exhaustive check.
Edited by 🤖 GitLab Bot 🤖