# GitLab SSO

{% hint style="warning" %}
The following steps describe the state of GitLab at the time of creating this instruction. The GitLab interface may change, so for the most up-to-date information, refer to the official [source](https://docs.gitlab.com/ee/integration/openid_connect_provider.html)
{% endhint %}

To log in to the AppSec portal through your GitLab account, follow these steps:

1. Navigate to your **profile** settings in GitLab and select the "**Applications**" tab.
2. Click "**Add new application**"

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FcjCS8WrrCcN2AhtsVL7J%2Fgitlab%20sso1.png?alt=media&#x26;token=ea5c7ea8-05e8-4208-9fdc-290ee51c5802" alt=""><figcaption></figcaption></figure>

3. Fill in the fields:&#x20;

* **Name** - Enter the name of the application as desired
* **Redirect URI** - \_\*\*<https://portal-dev.whitespots.io/oauth2/callback**_&#x20>;
* Ensure that the "**Confidential**" connection option is selected
* Choose the **scope** of information to be shared: ***openid***, ***profile***, ***email, read\_api (if you want to sync repositories)***
* Click "**Save application**"

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2FuqMpewxsb6kSQBDZhNTR%2Fgitlab%20sso2.gif?alt=media&#x26;token=a85712b7-0ce8-45bc-b024-401719bfeac6" alt=""><figcaption></figcaption></figure>

Use the data created for your application to [configure ](https://docs.whitespots.io/appsec-portal/general-portal-settings/sso-settings)SSO integration in the AppSec portal:

* **Domain**: gitlab.com
* **Client ID**: \<Application ID>
* **Client Secret**: \<Secret>
* **Scopes**: \<Scopes>

<figure><img src="https://3069717380-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M81VrXQrfSaYjNIFOtt%2Fuploads%2F3yDgV7ts776lrxTY2wlK%2Fgitlab%20sso2.png?alt=media&#x26;token=f464a9e0-b06e-4185-b90d-b13e7cb296ee" alt=""><figcaption></figcaption></figure>

These settings will allow you to use your GitLab account to log in to the AppSec portal