• pizzawithdirt@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    9 months ago

    I don’t have 2FA for my GitLab account since it’s only accesible via my GitHub account which has 2FA. Is this good or should I add 2FA to GitLab also?

      • BirdsWithBeefyArms@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        9 months ago

        This isn’t necessarily true. If you are using an identity provider, you can still perform a password reset on GitLab and set a password there, bypassing your 2FA on GitHub. You usually shouldnt rely on IdP 2FA unless the destination system enforces IdP signin every time. There is a group setting in GitLab that does that, but it will only apply for that group.