From 249cf940e489913c640fb0badb64dce97a4b32b7 Mon Sep 17 00:00:00 2001 From: Harish Ramachandran <harish@gitlab.com> Date: Tue, 3 Jan 2023 16:02:20 +0000 Subject: [PATCH] Document that SAML Group Sync only works with one provider --- doc/integration/saml.md | 2 ++ doc/user/group/saml_sso/group_sync.md | 4 ++++ 2 files changed, 6 insertions(+) diff --git a/doc/integration/saml.md b/doc/integration/saml.md index 73f220801bff..c42807f33cd7 100644 --- a/doc/integration/saml.md +++ b/doc/integration/saml.md @@ -200,6 +200,8 @@ You can configure GitLab to use multiple SAML IdPs if: - The `strategy_class` is explicitly set because it cannot be inferred from provider name. +[SAML Group Sync](../user/group/saml_sso/group_sync.md) does not support multiple IdPs. For more information, see [issue 386605](https://gitlab.com/gitlab-org/gitlab/-/issues/386605). + Example provider's configuration for installations from source: ```yaml diff --git a/doc/user/group/saml_sso/group_sync.md b/doc/user/group/saml_sso/group_sync.md index 80d145fc6bbb..52847d2a69c0 100644 --- a/doc/user/group/saml_sso/group_sync.md +++ b/doc/user/group/saml_sso/group_sync.md @@ -27,6 +27,10 @@ You must include the SAML configuration block on all Sidekiq nodes in addition t - Use SAML Group Sync. - Have multiple GitLab nodes, for example in a distributed or highly available architecture. +NOTE: +SAML Group Sync is only supported for the [SAML provider named `saml`](../../../integration/saml.md#configure-gitlab-to-use-multiple-saml-idps). +As a result, SAML Group Sync only supports a single SAML provider. For more information, see [issue 386605](https://gitlab.com/gitlab-org/gitlab/-/issues/386605). + WARNING: To prevent users being accidentally removed from the GitLab group, follow these instructions closely before enabling Group Sync in GitLab. -- GitLab