SAML Group Sync MVC for GitLab.com
### Release notes In GitLab 13.7, you can map a group in your identity provider to a GitLab.com group using SAML. Group memberships will be updated when a user logs into GitLab through their SAML provider. This new functionality decreases the workload for GitLab administrators and reduces onboarding time for group members. https://docs.gitlab.com/ee/user/group/saml_sso/#group-sync ![SAML_Group_Sync](/uploads/867e6281e19fd169ad7219a84458bfa7/SAML_Group_Sync.png) ### Description This Epic will contain the initial implementation of SAML group sync. To get the full history and requirements see https://gitlab.com/gitlab-org/gitlab/-/issues/118 . In this MVC: * Setup will be at the group/subgroup level in a 'SAML Group Links' submenu under 'Settings'. * Each group will need to configure mapping to specific attributes under a 'Groups' attribute statement in SAML. * We currently only invoke SAML responses when a user logs in so group changes will only happen when a user logs in. * If new groups are found during login, then the user will be added to those groups. * If groups are not found during login, then the user will be removed from those groups.
epic