Skip to content

Advanced search does not re-authenticate when SSO-only auth is enforced at group level

Summary

When SSO-only for web activity enforcement feature is enabled on group level and if an auth session doesn't exist, advanced search returns the message We couldn't find any projects matching <common1>search term> in group <group name> without trying to re-authenticate the user. But, it shows the total search hits on the left side pane. See below screenshot.

Steps to reproduce

  1. Make sure SAML needs re-authentication
  2. Navigate to https://gitlab.com/search?search=test
  3. Try to change the group scope to a group that requires SAML authentication
  4. It should now show: We couldn't find any projects matching <common1>search term> in group <group name>.
  5. Going back to the group home will do a re-authentication and search will start working again.

What is the current bug behavior?

Advanced search behaves indifferently when the group needs SAML re-authentication.

What is the expected correct behavior?

GitLab should do a re-authentication if needed and advanced search should return full results.

Relevant logs and/or screenshots

SAML-search-error

Possible fixes