|
|
|
# Accessing GitLab
|
|
|
|
|
|
|
|
Complete the steps below to gain access to GitLab.
|
|
|
|
|
|
|
|
## Prerequisites
|
|
|
|
|
|
|
|
- You must have an email address from the Department of Commerce or one of its bureaus
|
|
|
|
- You must have access to email sent to the above email address
|
|
|
|
- You must have an Okta Single Sign-On (SSO) account (described below)
|
|
|
|
- You must have a mobile phone and a two-factor authentication app (described below)
|
|
|
|
|
|
|
|
## Okta SSO account
|
|
|
|
|
|
|
|
If you have not registered for an OKTA SSO account, you will need to do so before you can access GitLab. For instructions on how to register, please refer to this [Knowledge Base Article](https://enterpriseservices.servicenowservices.com/ocio?id=kb_article_view&sysparm_article=kb0013733).
|
|
|
|
|
|
|
|
If you have issues accessing your OKTA SSO account, please contact the IT Service Desk (ITSD) by submitting a support ticket via the “Get Help” button on the [OCIO Self-Service Portal](https://commerce.servicenowservices.com/sp?sysparm_stack=no).
|
|
|
|
|
|
|
|
## Two-factor authentication app
|
|
|
|
|
|
|
|
1. If you don't already have one, download and install a two-factor authentication app on your mobile phone. Some options that our team has successfully used:
|
|
|
|
|
|
|
|
* Google Authenticator ([Android](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_US)) or ([iOS](https://itunes.apple.com/us/app/google-authenticator/id388497605?mt=8))
|
|
|
|
* Microsoft Authenticator ([Android](https://play.google.com/store/apps/details?id=com.azure.authenticator&hl=en_US)) or ([iOS](https://itunes.apple.com/us/app/microsoft-authenticator/id983156458?mt=8))
|
|
|
|
* Salesforce Authenticator ([Android](https://play.google.com/store/apps/details?id=com.salesforce.authenticator&hl=en_US)) or ([iOS](https://itunes.apple.com/us/app/salesforce-authenticator/id782057975?mt=8))
|
|
|
|
* FreeOTP ([Android](https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp&hl=en_US)) or ([iOS](https://itunes.apple.com/us/app/freeotp-authenticator/id872559395?mt=8))
|
|
|
|
* Authy ([Android](https://play.google.com/store/apps/details?id=com.authy.authy&hl=en_US)) or ([iOS](https://itunes.apple.com/us/app/authy/id494168017?mt=8))
|
|
|
|
|
|
|
|
## Commerce Web Solutions Authenticator account creation **(PLEASE SKIP THIS STEP IF YOU ARE NOT A USTPO EMPLOYEE)**
|
|
|
|
|
|
|
|
Create an account on the Commerce Web Solutions Authenticator (Authenticator) following the following steps.
|
|
|
|
|
|
|
|
1. Go to https://pass.commerce.gov/user/password
|
|
|
|
1. Enter your government email address and click the Submit button
|
|
|
|
1. Locate the Authenticator email message sent to your government email account and click the link found in the message
|
|
|
|
1. Create your password to complete the registration
|
|
|
|
|
|
|
|
## Logging into GitLab for the first time
|
|
|
|
|
|
|
|
1. From a web browser, visit GitLab at https://git.commerce.gov/
|
|
|
|
1. **FOR USPTO EMPLOYEES**, please use the credentials you setup via the CWSA portal above in the Username and Password fields
|
|
|
|
1. **All other DOC employees**, please use the `Okta SSO` login option (as seen in screenshot below)
|
|
|
|
1. Login to GitLab with your DOC network credentials
|
|
|
|
|
|
|
|
|
|
|
|
## Setup Two-factor authentication
|
|
|
|
1. You will be prompted to configure your two-factor authentication (2FA)
|
|
|
|
1. To change or update existing 2FA, go to https://git.commerce.gov/profile/two_factor_auth
|
|
|
|
1. Accept the terms and confirm that a QR code shows up
|
|
|
|
1. From the 2FA app on your mobile phone, add a new entry in one of two ways:
|
|
|
|
* Scan the GitLab QR code with your phone's camera, or
|
|
|
|
* Manually enter the GitLab QR code details into the app
|
|
|
|
1. In your browser on the Gitlab QR code page, enter the six-digit PIN number from your phone's 2FA app into the PIN code field
|
|
|
|
1. Click Submit and 2FA will be enabled
|
|
|
|
|
|
|
|
**Note: Do not save the recovery codes** -- if your mobile phone is ever lost, an incident may be submitted through the [OCIO Self-Service Portal](https://commerce.servicenowservices.com/sp?sysparm_stack=no) to temporarily disable 2FA on your account to allow you to login and perform this process again.
|
|
|
|
|
|
|
|
## Request access to specific projects and/or groups within Gitlab
|
|
|
|
|
|
|
|
1. Please request membership access to any project and/or groups for which you need access.
|
|
|
|
|
|
|
|
## Future logins to GitLab
|
|
|
|
|
|
|
|
Once 2FA is enabled, on subsequent logins when GitLab asks for the 2FA code, you will need enter the time-sensitive code that appears on the MFA app.
|
|
|
|
|
|
|
|
|
|
|
|
See [GitLab New User Email Template.docx (SharePoint)](https://docgov.sharepoint.com/:w:/r/sites/ADSDocumentRepository/Shared%20Documents/GitLab/GitLab%20New%20User%20Email%20Template.docx?d=wb090ad39fe9646bda6d301cbf4f92bb5&csf=1&web=1&e=faEM0c) for latest instructions.
|
|
|
|
|
|
|
|
The instructions were updated and moved to a Word document to provide for a better copy and paste to email experience. |
