aksw/redmine_omniauth_gitlab

This plugin is used to authenticate Redmine users using gitlab's OAuth2 provider.

Redmine omniauth gitlab

This plugin is used to authenticate Redmine users using gitlab's OAuth2 provider.

The major logic as similar as redmine_omniauth_google

Installation:

Download the plugin and install required gems:

cd /path/to/redmine/plugins
git clone https://github.com/AKSW/redmine_omniauth_gitlab
cd /path/to/redmine
bundle install

Restart the redmine

/path/to/redmine/ctlscript.sh restart

Registration

To authenticate via gitlab you must first register your redmine instance via your gitlab

Configuration

• Login as a user with administrative privileges.
• In top menu select "Administration".
• Click "Plugins"
• In plugins list, click "Configure" in the row for "Redmine Omniauth gitlab plugin"
• Enter the Сlient ID & Client Secret shown when you registered your application via gitlab Cloud Console.
• Check the box near "Oauth authentication"
• Click Apply.

Users can now to use their gitlab Account to log in to your instance of Redmine.

Additionaly

• Setup value Autologin in Settings on tab Authentification

Other options

By default, all user email domains are allowed to authenticate through gitlab. If you want to limit the user email domains allowed to use the plugin, list one per line in the "Allowed domains" text box.

For example:

onedomain.com
otherdomain.com

With the above configuration, only users with email addresses on the domains "onedomain.com" and "otherdomain.com" will be allowed to acccess your Redmine instance using gitlab OAuth.

Authentication Workflow

1. An unauthenticated user requests the URL to your Redmine instance.
2. User clicks the "Login via gitlab" buton.
3. The plugin redirects them to a gitlab sign in page if they are not already signed in to their gitlab account.
4. gitlab redirects user back to Redmine, where the gitlab OAuth plugin's controller takes over.

One of the following cases will occur:

1. If self-registration is enabled (Under Administration > Settings > Authentication), user is redirected to 'my/page'
2. Otherwse, the an account is created for the user (referencing their gitlab OAuth2 ID). A Redmine administrator must activate the account for it to work.