Keycloak OIDC

Note: configured, but not yet tested

Configuration Keycloak, which is based on OpenID (OIDCS). For additional GitLab specific values, please see their documentation.

Note, if you are using a self-hosted version of GitLab, then you you should adjust the URL for authorizationEndpoint as appropriate.

Adjust scope values according to your needs

gitlab: {
  clientId: '',
  redirectUri: '',
  name: 'keycloak',
  url: '/auth/keycloak',
  authorizationEndpoint: 'https://keycloakurl.com/realms/yourrealm/protocol/openid-connect/auth',
  requiredUrlParams: ['display', 'scope'],
  scope: ['read_user', 'profile'],
  scopeDelimiter: '',
  display: 'popup',
  oauthType: '2.0',
  popupOptions: { width: 580, height: 700 }
}

References

• Securing Applications and Services Guide
• OpenID