Skip to content

Fix Mattermost GitLab SSO instructions

Sylvia van Os requested to merge TheLastProject/gitlab:TheLastProject-master-patch-46249 into master

What does this MR do and why?

I've tried to set up GitLab Mattermost, only to find the instructions don't work.

The old instructions don't work, because GitLab will complain the scope can't be blank:

image

If you select a purposefully small scope to try to limit exposure, such as only email, Mattermost GitLab login will fail with an "invalid scope" error.

image

Further researching I found https://docs.mattermost.com/onboard/sso-gitlab.html. However, using both the suggested Team or Enterprise settings did not work.

I then found this forum post and could confirm the stated scope there works: https://forum.gitlab.com/t/the-requested-scope-is-invalid-unknown-or-malformed-when-logging-in-to-gitlab/31959/2

Note: I have not tested every single possible scope combination, if a more restrictive scope is possible, documenting this for security reasons would be very good.

Screenshots or screen recordings

Not relevant.

How to set up and validate locally

Follow the instructions in the setup guide that's being edited here.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

I have looked through the checklist, but couldn't find anything relevant to documentation fixes.

Merge request reports