2021-09-30 23:02:18 +05:30
---
comments: false
type: index
stage: Manage
group: Access
info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
---
# GitLab authentication and authorization **(FREE SELF)**
GitLab integrates with the following external authentication and authorization
providers:
- [Atlassian ](atlassian.md )
- [Auth0 ](../../integration/auth0.md )
- [Authentiq ](authentiq.md )
- [AWS Cognito ](cognito.md )
- [Azure ](../../integration/azure.md )
- [Bitbucket Cloud ](../../integration/bitbucket.md )
- [CAS ](../../integration/cas.md )
- [Crowd ](crowd.md )
- [Facebook ](../../integration/facebook.md )
- [GitHub ](../../integration/github.md )
- [GitLab.com ](../../integration/gitlab.md )
- [Google OAuth ](../../integration/google.md )
- [JWT ](jwt.md )
- [Kerberos ](../../integration/kerberos.md )
- [LDAP ](ldap/index.md ): Includes Active Directory, Apple Open Directory, Open LDAP,
and 389 Server.
- [Google Secure LDAP ](ldap/google_secure_ldap.md )
- [Salesforce ](../../integration/salesforce.md )
- [SAML ](../../integration/saml.md )
- [SAML for GitLab.com groups ](../../user/group/saml_sso/index.md ) ** (PREMIUM SAAS)**
2021-11-18 22:05:49 +05:30
- [Shibboleth ](../../integration/saml.md )
2021-09-30 23:02:18 +05:30
- [Smartcard ](smartcard.md ) ** (PREMIUM SELF)**
- [Twitter ](../../integration/twitter.md )
NOTE:
UltraAuth has removed their software which supports OmniAuth integration. We have therefore removed all references to UltraAuth integration.
## SaaS vs Self-Managed Comparison
The external authentication and authorization providers may support the following capabilities.
For more information, see the links shown on this page for each external provider.
| Capability | SaaS | Self-Managed |
|-------------------------------------------------|-----------------------------------------|------------------------------------|
2021-11-18 22:05:49 +05:30
| **User Provisioning** | SCIM< br > Just-In-Time (JIT) Provisioning | LDAP Sync |
2021-09-30 23:02:18 +05:30
| **User Detail Updating** (not group management) | Not Available | LDAP Sync |
| **Authentication** | SAML at top-level group (1 provider) | LDAP (multiple providers)< br > Generic OAuth2< br > SAML (only 1 permitted per unique provider)< br > Kerberos< br > JWT< br > Smartcard< br > OmniAuth Providers (only 1 permitted per unique provider) |
| **Provider-to-GitLab Role Sync** | SAML Group Sync | LDAP Group Sync |
| **User Removal** | SCIM (remove user from top-level group) | LDAP (Blocking User from Instance) |
