# GitLab
Log in to your GitLab account or create one here
Go to the user settings which can be found in the user profile to create an application where you will get your app credentials
On the Applications page, add a new application by setting the following parameters:
Field | Description |
---|---|
Name | The name of your web app |
Redirect URI | https://${authenticate_service_url}/oauth2/callback |
Scopes | Must select read_user and openid |
Group ID will be used to affirm group(s) a user belongs to.
Your Client ID
and Client Secret
will be displayed:
Set Client ID
and Client Secret
in Pomerium's settings. Your environment variables should look something like this.
authenticate_service_url: https://authenticate.localhost.pomerium.io
idp_provider: "gitlab"
idp_client_id: "REDACTED" // gitlab application ID
idp_client_secret: "REDACTED" // gitlab application secret
When a user first uses pomerium to login, they will be presented with an authorization screen similar to the following depending on the scope parameters setup.