diff --git a/doc/integration/saml.md b/doc/integration/saml.md index c0c33991ad27a0094b8deab5573204232f6dbf88..8980e96da639cc1dfbbc88831866f483fdf9d1ae 100644 --- a/doc/integration/saml.md +++ b/doc/integration/saml.md @@ -2987,7 +2987,7 @@ GitLab [generates and sets passwords for users created through SAML](../security Users authenticated with SSO or SAML must not use a password for Git operations over HTTPS. These users can instead: -- Set up a [personal access token](../user/profile/personal_access_tokens.md). +- Set up a [personal](../user/profile/personal_access_tokens.md), [project](../user/project/settings/project_access_tokens.md), or [group](../user/group/settings/group_access_tokens.md) access token. - Use an [OAuth credential helper](../user/profile/account/two_factor_authentication.md#oauth-credential-helpers). ## Link SAML identity for an existing user diff --git a/doc/user/profile/personal_access_tokens.md b/doc/user/profile/personal_access_tokens.md index 541c91ab8c68ab041af50006bd2fd92867074c73..c8063b764ca12437418f7bf62f20fce9e59982cc 100644 --- a/doc/user/profile/personal_access_tokens.md +++ b/doc/user/profile/personal_access_tokens.md @@ -27,7 +27,8 @@ The ability to create personal access tokens without expiry was [deprecated](htt Personal access tokens are: -- Required when [two-factor authentication (2FA)](account/two_factor_authentication.md) is enabled. +- Required when [two-factor authentication (2FA)](account/two_factor_authentication.md) or + [SAML](../../integration/saml.md#password-generation-for-users-created-through-saml) is enabled. - Used with a GitLab username to authenticate with GitLab features that require usernames. For example, [GitLab-managed Terraform state backend](../infrastructure/iac/terraform_state.md#use-your-gitlab-backend-as-a-remote-data-source) and [Docker container registry](../packages/container_registry/authenticate_with_container_registry.md),