# Authentication
Information about authenticating with gitea and known flavours of operating systems. (windows, linux and mac)
Authentication on the GUI (gitea.psi.ch) only works with a PSI account in EntraID (Azure AD). The login name is the UPN (UserPrincipleName) with your password and MFA token.

## PSI User
### GUI
The UPN of a PSI user is its email address
Password
PSI MFA
If you are logged in to outlook or any other PSI application that uses MFA you will be logged in automatically!

### SSH
RSA keys must be longer than 3000 bits! We suggest you create a elliptic curve key: 'ssh-keygen -t ed25519'

To clone a repo or change its remote to SSH you can use this commands

- 'git clone git@gitea.psi.ch:ORGANIZATION/REPOSITORY.git'
- 'git remote set-url origin git@gitea.psi.ch:ORGANIZATION/REPOSITORY.git'

### HTTPS
GIT with HTTPS can be done with a Personal Access Token created here: https://gitea.psi.ch/user/settings/applications or with https://github.com/hickford/git-credential-oauth

- 'git clone https://gitea.psi.ch/ORGANIZATION/REPOSITORY.git
- Username
- Password is your created token

## External User
External users must be created in DUO or via HR, otherwise they are not automatically synced to the correct access group: m365-app_git_rest. If this group is missing the user won't be able to login.
Open a SNOW Ticket to get your user in that group or contact the AD Team.

### GUI
The UPN of an external user is 'ext-user_name@psi.ch'
Password
PSI MFA

### SSH
There are no restrictions for external users once added to a project

### HTTPS
External Users can use both methods that PSI users can.