GitLab disables the normal username for login and allows only login to OmniAuth

Question

I have gitlab, everything is configured and ready with omniauth, and I was wondering if it is possible to disable default authentication with a password and username completely and use only omniauth (in our case, google login). What I hope to achieve is enhanced security by forcibly checking two factors with the Google applications included with omniauth.

Answer 1

After Gitlab version 7.7.0, you can configure the login and logon behavior of the Admin area on the Settings page. If you clear the Signin enabled checkbox, then access will be only for entering the OAuth system.

Note that the settings of gitlab_rails['gitlab_signin_enabled'] and gitlab_rails['gitlab_signup_enabled'] in gitlab.rb now have no effect .

Answer 2

This functionality was added in v 6.8.

You need to change the setting in gitlab.yml to signin_enabled: false or add gitlab_rails['gitlab_signin_enabled'] = false in gitlab.rb if you use Omnibus.