OAuth and Google SSO

[Claudio DeSouza]

Hi,

I have twice in the past setup gerrit with LDAP, as in the instructions in https://hub.docker.com/r/gerritcodereview/gerrit, so I'm not new to setting up a gerrit instance.

However, I now need to setup a gerrit instance that uses the google authentication be it for company's email managed to go, or just general gmail accounts, to be able to set up a gerrit instance for an open source project.

Are there any guides on how to do that? I noticed there an OAuth and a SAML plugin, but I couldn't find anything explaining how you get a new gerrit instance running like that.

Claudio.

[Claudio DeSouza]

Would someone be able to chime in with some pointers? Do I use the SAML plugin? The OAuth one? Any info would be helpful.

Claudio

[Luca Milanesio]

On 22 Aug 2025, at 13:11, Claudio DeSouza <cdes...@chromium.org> wrote:

Would someone be able to chime in with some pointers? Do I use the SAML plugin? The OAuth one? Any info would be helpful.

Why don’t you start from the documentation?

OAuth has a pretty good one, also mentioning Google Auth.

See [1] for more details.

HTH

Luca.

[1] https://gerrit.googlesource.com/plugins/oauth/

Claudio

On Wednesday, August 20, 2025 at 10:14:26 AM UTC+1 Claudio DeSouza wrote:

Hi,

I have twice in the past setup gerrit with LDAP, as in the instructions in https://hub.docker.com/r/gerritcodereview/gerrit, so I'm not new to setting up a gerrit instance.

However, I now need to setup a gerrit instance that uses the google authentication be it for company's email managed to go, or just general gmail accounts, to be able to set up a gerrit instance for an open source project.

Are there any guides on how to do that? I noticed there an OAuth and a SAML plugin, but I couldn't find anything explaining how you get a new gerrit instance running like that.

Claudio.

--
--
To unsubscribe, email repo-discuss...@googlegroups.com
More info at http://groups.google.com/group/repo-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/repo-discuss/d7f0b878-973d-49a0-888b-5217eeea4e82n%40googlegroups.com.

[Claudio DeSouza]

Thanks for the reply. Yes I have been already taking a look into this. I guess I just need to about doing as the FAQ says.

Claudio.

[Luca Milanesio]

On 22 Aug 2025, at 21:55, Claudio DeSouza <cdes...@chromium.org> wrote:

Thanks for the reply. Yes I have been already taking a look into this. I guess I just need to about doing as the FAQ says.\

For Google OAuth, just add the relevant section, as indicated in the [2].

Also, install the OAuth plugin, which isn’t part of Google core.

You can find the plugin jar in the plugin-manager URL at [3].

HTH

Luca.

[2] https://gerrit.googlesource.com/plugins/oauth/+/refs/heads/master/src/main/resources/Documentation/config.md

[3] https://gerrit-ci.gerritforge.com/plugin-manager/

To view this discussion visit https://groups.google.com/d/msgid/repo-discuss/5bc4dba3-deee-4730-aa0e-7ca3f1b3dcd9n%40googlegroups.com.

[Claudio DeSouza]

Ah, thanks for that reference, I hadn't seen that documentation config.md you linked. This is very helpful. Much appreciated.

Claudio