I’m in the process of setting up a new internal Gitlab server. It resides entirely within our firewall with no public access.
I configured it to use AD authentication just fine, but was a bit surprised when I logged in as a new user I just jumped right in with a new account.
OK, so I was persistently warned that I had Sign-up restrictions enabled, and disabled it, maybe I need to reenable that? After reenabling Sign-up and requiring admin approval for sign-ups, I was dismayed to find a new AD user just jumped right in to a new account without being required to sign up or wait for approval.
I don’t want just anyone in my company who was AD creds to be able to log in to the app and create a new account. I want to require AD users to sign up, and have an admin approve new AD signups.
Can Gitlab be configured in this way?