GitLab OIDC

Marmot supports GitLab (both gitlab.com and self-hosted) as an OIDC provider for Single Sign-On authentication.

Create a GitLab Application

1. Log in to your GitLab instance
2. Navigate to User Settings → Applications (or for groups: Settings → Applications)
   • GitLab.com: https://gitlab.com/-/profile/applications
   • Self-hosted: https://your-gitlab-instance.com/-/profile/applications
3. Click Add new application
4. Fill in the application details:
   • Name: Marmot
   • Redirect URI: https://your-marmot-domain.com/auth/gitlab/callback
   • Confidential: Check this option
   • Scopes: Select openid, profile, and email
5. Click Save application

After creating the application, note:

• Application ID: Your client ID
• Secret: Your client secret

Configure Marmot

For GitLab.com

Set the following environment variables:

export MARMOT_AUTH_GITLAB_ENABLED=true
export MARMOT_AUTH_GITLAB_CLIENT_ID="your-application-id"
export MARMOT_AUTH_GITLAB_CLIENT_SECRET="your-secret"

Or configure via config.yaml:

auth:
  gitlab:
    enabled: true
    client_id: "your-application-id"
    client_secret: "your-secret"

For Self-Hosted GitLab

If you're using a self-hosted GitLab instance, you need to specify the URL:

export MARMOT_AUTH_GITLAB_ENABLED=true
export MARMOT_AUTH_GITLAB_CLIENT_ID="your-application-id"
export MARMOT_AUTH_GITLAB_CLIENT_SECRET="your-secret"
export MARMOT_AUTH_GITLAB_URL="https://gitlab.your-company.com"

Or configure via config.yaml:

auth:
  gitlab:
    enabled: true
    client_id: "your-application-id"
    client_secret: "your-secret"
    url: "https://gitlab.your-company.com"

Restart Marmot and the GitLab login button will appear on the login page.