Skip to content

SSO Enforcement not redirecting to Group's Single Sign-On Page for some groups

Summary

For a very small amount of groups with SSO enforcement enabled on GitLab.com, potentially just a few, accessing the group in the browser without having logged in, doesn't redirect to the group's Single Sign-On URL. Only when using the GitLab Single Sign-On URL from the SAML settings (which includes the token), the redirect would work correctly. See https://gitlab.com/gitlab-com/sec-sub-department/section-sec-request-for-help/-/issues/179#note_1714584181 (internal issue) for identified rootcause

Workaround: While this hasn't been fixed, a workaround would be to access the GitLab single sign-on URL, which is shown in the Group's SAML settings, directly.

Steps to reproduce

Steps to reproduce this issue is unclear at this point as it only affects a few groups at this point.

What is the current bug behavior?

See above: for a very small amount of groups, possibly just a few, accessing the group that has SAML enforced, doesn't redirect to the Group's GitLab Single Sign-On URL.

What is the expected correct behavior?

If a group has SSO enforced on the web activity, accessing said group without an active session should redirect them to the Group's Single Sign-On URL. This should be the case for all groups with SSO enforced on the web activity.

Output of checks

This bug happens on GitLab.com

Edited by Adil Farrukh