Integration

Multi-factor (passwordless) authentication to the GitLab application interface

Secure login (MFA/2FA) to the system interface for administrators and users

Passwordless login to cloud using the second factor using ProID Mobile and other ProID tools

Manage and develop source code with secure access

GitLab is a web-based platform for code version control and developer collaboration. It’s an integrated tool for managing Git repositories that allows teams to create, share, manage, and collaborate on code and projects. GitLab provides a wide range of features for planning, testing, and deploying software products.

GitLab is available in two main variants: as a hosted service (GitLab.com) and as open-source software that you can install on your own server (GitLab CE and GitLab EE).

Supported Authentication Methods to the GitLab

Passwordless

Multifactor (MFA)

Twofactor (2FA)

Push notification

One Time Password (OTP)

SMS

Multi-factor (MFA/2FA), passwordless login to GitLab

ProID enables secure two-factor login to the GitLab cloud interface and repositories using a mobile app and other means – smart card and tokens. Authentication with ProID Mobile is handled via the supported SAML 2.0 or OpenID Connect protocols and allows a number of authentication methods (push notifications, SMS, OTP, etc.). Login is passwordless, i.e. without the need to enter a password.

You can log in to GitLab and other tools from the Version Control Software or Collaboration Software categories using biometrics and other methods supported by smartphones.

External HSM server for storing digital keys in GitLab

Source code is often the only asset that development companies have. They contain their know-how and thousands of hours of invested work. Therefore, it is important to ensure their complete safety.

The problem is not only hacker attacks, but also former employees or external collaborators. In these cases, it is necessary to have full control over all access permissions and digital keys that allow access to the company’s source code repositories.

Our solution is built on an external HSM (Hardware Security Module), which is stored physically on the premises of a specific company or is rented as a SaaS. This module stores all digital keys that are used to access company accounts on GitLab.

The keys are therefore fully under the control of the company, they cannot be stolen or exported. This solution provides a truly secure development environment under the full control of the organization.

Island mode with ProID Mobile method

In the event of an internet outage or the need to disconnect the entire organization from the network, we are able to ensure that authentication works in hybrid (offline) mode.