I administer a CE omnibus Gitlab instance. It was originally configured to use LDAP but we recently switched to using Azure AD. I do not want to use LDAP as an option to login to Gitlab, all of our users currently use AAD to login to other services so they are used to that, and we can enforce MFA through Azure across the board.
I got it (mostly) working as I would expect it to, however users (including non-admin users) are able to “Disconnect” from their Azure account from their User Settings > Account > Social sign-in.
Since Gitlab is using this as their auth to get into the web interface, I don’t want it to be a Social Account they can disconnect from; it is their work account.
Is there anyway I can hide this option or disable it? I’ll post the gitlab_rails section (minus sensitive details) below.