Files
documentation/docs/services/gitea/authentication.md
2026-09-28 17:14:01 +02:00

1.6 KiB

Authentication

Information about authenticating with gitea and known flavours of operating systems. (windows, linux and mac) Authentication on the GUI (gitea.psi.ch) only works with a PSI account in EntraID (Azure AD). The login name is the UPN (UserPrincipleName) with your password and MFA token.

PSI User

GUI

The UPN of a PSI user is its email address Password PSI MFA If you are logged in to outlook or any other PSI application that uses MFA you will be logged in automatically!

SSH

RSA keys must be longer than 3000 bits! We suggest you create a elliptic curve key: 'ssh-keygen -t ed25519'

To clone a repo or change its remote to SSH you can use this commands

  • 'git clone git@gitea.psi.ch:ORGANIZATION/REPOSITORY.git'
  • 'git remote set-url origin git@gitea.psi.ch:ORGANIZATION/REPOSITORY.git'

HTTPS

GIT with HTTPS can be done with a Personal Access Token created here: https://gitea.psi.ch/user/settings/applications or with https://github.com/hickford/git-credential-oauth

External User

External users must be created in DUO or via HR, otherwise they are not automatically synced to the correct access group: m365-app_git_rest. If this group is missing the user won't be able to login. Open a SNOW Ticket to get your user in that group or contact the AD Team.

GUI

The UPN of an external user is 'ext-user_name@psi.ch' Password PSI MFA

SSH

There are no restrictions for external users once added to a project

HTTPS

External Users can use both methods that PSI users can.