Add authentication management method to replace PATs with configuration file

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

  • Close this issue

Problem to solve

The goal is to reduce dependency on and the exposure of PAT in pipelines by implementing a method of "authentication as code" The request would be to have a git repository which links SAML group links on groups within a customer group structure on GitLab.

An example of what a configuration file could look like:

saml_group_links:

  • group_id: 1
    saml_links:
    • ad_group_id: 11111111-1111-1111-1111-111111111111
      access_level: maintainer
    • ad_group_id: 11111111-1111-1111-1111-111111111112
      access_level: owner
  • group_id: 2
    saml_links:
    • ad_group_id: 11111111-1111-1111-1111-111111111113
      access_level: developer

The idea would be to monitor this repository/file, and when changes are made to the default branch, gitlab would make sure to make these links.

Edited Aug 28, 2025 by 🤖 GitLab Bot 🤖
Assignee Loading
Time tracking Loading