SAML Single Sign-On (SSO) Integration
Strengthening GitLab.com security: Mandatory MFA

Strengthening GitLab.com security: Mandatory MFA

1/9/2026 · Kim Waters

What this post added

This post details the implementation of mandatory multi-factor authentication (MFA) for all GitLab.com users and API endpoints authenticating with a username and password. It outlines the phased rollout strategy, user impact, and required actions, including proactive setup of MFA methods and migration to Personal Access Tokens (PATs) for API authentication. This enhances the existing authentication and authorization capabilities by adding a critical security layer against account takeover threats.

Read the original post ↗