Skip to content

Event type information in saml auth audit event stream

Harsimar Sandhu requested to merge 363089-saml-auth-audit-event-type into master

What does this MR do and why?

Adds event type information whenever a user signs in using Group SAML.

How to set up and validate locally

  1. Setup SAML https://gitlab.com/gitlab-org/gitlab-development-kit/-/blob/main/doc/howto/saml.md
  2. Setup external destination using https://docs.gitlab.com/ee/administration/audit_event_streaming.html#use-the-gitlab-ui or https://docs.gitlab.com/ee/administration/audit_event_streaming.html#use-the-api .
  3. Login using group saml
  4. Check audit event is created (Group -> Security and compliance -> audit events) and streamed with correct event type.
  5. Check authentication event is created in database.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #363089 (closed)

Edited by Harsimar Sandhu

Merge request reports