diff --git a/debian/patches/0009-loosen-omniauth-shibboleth.patch b/debian/patches/0009-loosen-omniauth-shibboleth.patch
new file mode 100644
index 0000000000..62a7fea6aa
--- /dev/null
+++ b/debian/patches/0009-loosen-omniauth-shibboleth.patch
@@ -0,0 +1,13 @@
+Index: gitlab/Gemfile
+===================================================================
+--- gitlab.orig/Gemfile
++++ gitlab/Gemfile
+@@ -28,7 +28,7 @@ gem 'omniauth', "~> 1.2.2"
+ gem 'omniauth-google-oauth2', '~> 0.2.4'
+ gem 'omniauth-twitter', '~> 1.0'
+ gem 'omniauth-github', '~> 1.1.1'
+-gem 'omniauth-shibboleth', '~> 1.1.1'
++gem 'omniauth-shibboleth', '~> 1.2'
+ gem 'omniauth-kerberos', '~> 0.2.0', group: :kerberos
+ gem 'omniauth-gitlab', '~> 1.0.0'
+ gem 'omniauth-bitbucket', '~> 0.0.2'
diff --git a/debian/patches/series b/debian/patches/series
index ab9817c0f9..db5875cba7 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -6,3 +6,4 @@ loosen-rails-version.patch
 0006-loosen-grape.patch
 0007-loosen-omniauth-google-oauth2.patch
 0008-loosen-omniauth-twitter.patch
+0009-loosen-omniauth-shibboleth.patch