To configure an integration between the JFrog Platform and GitLab, follow these steps:
Navigate to the Administration tab In the JFrog Platform UI
Click General Management | Manage Integrations
Click New Integration, and select OpenID Connect from the drop-down menu. Enter the following information in the module fields:
In the Provider Type field, select Generic OpenID Connect from the drop-down menu
In the Provider URL field:
For Cloud GitLab users, enter:
https://gitlab.com
For Self-Hosted GitLab users, enter the URL of your GitLab instance
(Optional) In the Description field, enter a description for the integration
(Optional) In the Audience field, enter the audience you want to use for the integration- note that the token audience needs to match this value.
(Optional) In the Token Issuer field, if required, add the token issuer
Note
Token Issuer is required only if the
iss
claim in the GitLab token is different from the value of the Provider URL field.
Under Identity Mappings, click Add Identity Mapping. Enter the following information in the module fields:
In the Priority field, enter 1 to assign the strongest permission gate
(optional) In the Description field, enter a description for the identity mapping
In the Claims JSON field, enter the identity mapping according to the token claims you want to match: for example, in this entry, the
"sub"
claim matches value"project_path:root/oidc-poc:ref_type:branch:ref:main"
:{"sub": "project_path:root/oidc-poc:ref_type:branch:ref:main"}
See below for a list of valid GitLab JSON claims:
Click Save
Click Save