Add OpenID Connect OmniAuth Provider to GitLab Omnibus

See https://gitlab.com/gitlab-org/gitlab-ce/issues/23255

Description

Currently, the GitLab CE Omnibus does not include an OmniAuth provider for connecting to an OpenID Connect system. There are multiple specific "social logins" such as Google, Twitter, Facebook, etc. However, there doesn't appear to be a way to set up a connection with a locally installed or third-party OpenID Connect provider (such as IdentityServer or Keycloak). GitLab should be able to work with these systems.

Proposal

  • Add omniauth-openid-connect RubyGem to Omnibus

  • Add support for configuring OpenID Connect providers through gitlab.rb (ideally multiple unique ones would show up as different buttons on GitLab UI using the name property set up for the openid-connect provider, but supporting just one is fine, too)

Links

  • https://github.com/jjbohn/omniauth-openid-connect
  • https://github.com/ComputerScienceHouse/gitlab-ce-oidc
  • https://identityserver.io/
Edited Jan 28, 2018 by serious
Assignee Loading
Time tracking Loading