Managing GitLab Just-in-Time provisioning mode
Once you’ve set up the GitLab authentication and provisioning with the Just-in-Time (JIT) provisioning mode (default mode), you can set or change the JIT provisioning mode options.
You need the global Administer System permission in SonarQube Community Build to perform this setup.
Setting up the group synchronization
With the JIT provisioning mode, you can enable group synchronization. The group synchronization requires that you manually create the user groups in SonarQube Community Build: see below.
If you enable the group synchronization, you cannot manage group memberships manually and existing manually added group memberships of JIT-provisioned users are reset in SonarQube Community Build during synchronization.
- Go to Administration > Configuration > General Settings > Authentication > GitLab.
- Select or unselect the Synchronize user groups option.
- Save.
Creating the user groups in SonarQube Community Build
To allow group synchronization, you must create in SonarQube Community Build a group for each GitLab group and subgroup you want to synchronize: see Managing user groups.
You must name the SonarQube Community Build group according to the URL of the GitLab group or subgroup. Be aware that that name check is case-sensitive.
Examples:
- If the URL of the GitLab group is
https://gitlab.com/my-gitlab-group, the name of the SonarQube Community Build group mus bemy-gitlab-group. - If the URL of the GitLab group is
https://gitlab.com/my-gitlab-group/sub-group, the name of the SonarQube Community Build group must bemy-gitlab-group/sub-group.
To set the group permissions at the system level, see Managing user permissions.
Blocking/Authorizing the sign-up of new users
You can block the signup of new users with SonarQube. This may be useful if you want to manage user provisioning through an API.
To block or authorize the sign-up of new users with SonarQube Community Build:
- Go to Administration > Configuration > General Settings > Authentication > GitLab.
- Unselect or select the Allow new users to sign up option.
- Save.
With SonarQube Server, you can restrict access to SonarQube by defining Allowed groups. For more information, see SonarQube Community Build feature support.
Related pages
Was this page helpful?
© 2008-2025 SonarSource SA. All rights reserved. SONAR, SONARSOURCE, SONARQUBE, and CLEAN AS YOU CODE are trademarks of SonarSource SA.
