I have gitlab (ee) setup with terraform to run in a k8s cluster on azure. This all works fine and dandy, but what I would love to do is use LDAPS to sync user and group permissions with Azure AD, so I can use it as shown here: https://www.youtube.com/watch?v=HPMjM-14qa8.

However, as many will mention, Azure AD itself does not support LDAP. AADDS (Azure Active Directory Domain Service) does support it, among a lot of other things, but also comes at a cost. I'd like to get as close to the solution as shown in the video, with the least amount of layering. I could setup a separate openLDAP with slapd, but would really prefer to just manage users and groups in one place (like azure AD). Has anyone have found a nice solution for this kind of setup?


Gitlab OmniAuth offers OAuth2 to allow sign in via Azure AD. Consult the docs for details: https://docs.gitlab.com/ee/integration/azure.html

SAML2 should be supported by both as well, but might be a little trickier to setup.

|improve this answer|||||
  • thanks, I've seen that, but this just allows you to check credentials after which a new account is created. If I understand correctly you cannot actually sync users and groups (and set permissions based on that). – SeeDoubleYou Apr 9 '19 at 19:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.