UR Self-Hosted GitLab Changing to AD SAML

GitLab (git.its.rochester.edu) is changing to AD SAML authentication on 7/21/2022

As you may have seen in @Rochester or on tech.rochester.edu, the University is moving toward using a single authentication technology. Currently, NetID and Active Directory (AD) are the most commonly used credentials for authentication services. Over the next year, all applications currently using NetID are expected to migrate from NetID to Active Directory (AD) as the means for authentication.

To this end, we will be performing maintenance on the UnivIT GitLab server at https://git.its.rochester.edu from 5:00 PM ET to 7:00 PM ET on Thursday, July 21, 2022, to migrate the service to Active Directory/SAML authentication.

After this maintenance, you will be required to use your Active Directory (AD) credentials to gain access to GitLab. Keep in mind that your AD Credentials are the same credentials you typically use to log in to a Windows computer, access the University wireless network, and for enterprise services like Microsoft 365, Workday Student, and Workday Finance. If you do not know what your AD credentials are please visit https://myidentity.rochester.edu.

Navigating to the GitLab UI, you will see a new login screen (although you are likely familiar with the login screen from other applications). At the login screen, log in with your Active Directory (AD) credentials. As a reminder, these are the same credentials used to log in to your computer.

Select the correct Domain in the drop-down:

UR Active Directory=Non-Medical Center faculty, staff, and students
URMC Active Directory=Medical Center and affiliates-faculty, staff, and students

Click Sign in.

Important: If you currently clone, pull, or push repositories via HTTPS using your NetID credentials, you will no longer be able to do so after the migration to AD/SAML. You will either need to clone/pull/push using the SSH method (recommended) or clone/pull/push the repository using HTTPS and a personal access token. Please review the documentation below on the respective options:

SSH method: https://docs.gitlab.com/ee/user/ssh.html)
Personal Access Tokens: https://docs.gitlab.com/ee/user/profile/personal_access_tokens.html

Note: Duo is required for Active Directory (AD) logins when not on the University network. If you do not already have Duo for your Active Directory (AD) account, please see the guidance posted at https://tech.rochester.edu/services/two-factor-authentication/.

Two-factor authentication will not be necessary when cloning, pulling, or pushing repositories.

We appreciate your flexibility as we work towards streamlining the authentication process for everyone.

If you have questions or concerns about this change please reach out to UnivITWebServices@UR.Rochester.edu or the University IT Help Desk at (585) 275-2000.