How GitLab supports NSA and CISA CI/CD security guidance
Sep 19, 2023Joseph Longo
Summary
This post details how GitLab's SAML SSO and SCIM integrations support NSA/CISA guidance on minimizing long-term credentials and implementing least privilege policies for CI/CD access, by centralizing authentication and authorization responsibilities and automating user identity lifecycles.
More from the SAML Single Sign-On (SSO) Integration trail
- A leaked personal access token shouldn't expose every project its owner can reach. Fine-grained PATs scope each token’s permissions to the job.
- Passkeys now available for passwordless sign-in and 2FA on GitLab
- How to set up GitLab SAML SSO with Google Workspace
- Strengthening GitLab.com security: Mandatory MFA
- Automating role-based access control (RBAC) at scale