# API authentication when using Gitlab SSO

**URL:** <https://forum.mattermost.com/t/api-authentication-when-using-gitlab-sso/7882>\
**Category:** Troubleshooting\
**Created:** [August 11, 2019, 7:27am UTC](https://forum.mattermost.com/t/api-authentication-when-using-gitlab-sso/7882 "2019-08-11T07:27:44Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![mwcoop](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@mwcoop](https://forum.mattermost.com/u/mwcoop)\
**Post date:** [August 11, 2019, 7:27am UTC](https://forum.mattermost.com/t/api-authentication-when-using-gitlab-sso/7882/1 "2019-08-11T07:27:44Z")

</div>

Hi,

I’ve got Mattermost running as part of a Gitlab installation. Gitlab sign-on is working and is currently the only enabled authentication mechanism for users. Gitlab itself authenticates against another SSO provider used across other applications.

In an effort to automate user onboarding, I’m trying to invite newly created users to join teams in Mattermost.

1. How should I authenticate to the API server when using Gitlab as SSO?
2. Any pointers to documentation for inviting/removing users to/from teams would be extremely appreciated.

---

<div class="post-metadata">

**Author:** ![amy.blais](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/amy.blais/32/7481_2.png) [@amy.blais](https://forum.mattermost.com/u/amy.blais)\
**Post date:** [August 13, 2019, 1:33pm UTC](https://forum.mattermost.com/t/api-authentication-when-using-gitlab-sso/7882/2 "2019-08-13T13:33:14Z")

</div>

Hi @mwcoop, this doc might help: [https://docs.mattermost.com/deployment/sso-gitlab.html](https://docs.mattermost.com/deployment/sso-gitlab.html).

---

<div class="post-metadata">

**Author:** ![mwcoop](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@mwcoop](https://forum.mattermost.com/u/mwcoop)\
**Post date:** [September 18, 2019, 5:37am UTC](https://forum.mattermost.com/t/api-authentication-when-using-gitlab-sso/7882/3 "2019-09-18T05:37:11Z")

</div>

Thanks. However, I have Gitlab SSO working. I am now trying to access Mattermost API via the python mattermostdriver project.

Using a personal access token returns a 401 response. This is an old question about the same problem:

[https://stackoverflow.com/questions/36650437/using-mattermost-api-via-gitlab-oauth-as-an-end-user-with-username-and-password](https://stackoverflow.com/questions/36650437/using-mattermost-api-via-gitlab-oauth-as-an-end-user-with-username-and-password)

Anyway, I’m looking for a way to access API as a user who signs in via Gitlab SSO. Any help is greatly appreciated.

---

<div class="post-metadata">

**Author:** ![ahmaddanial](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/ahmaddanial/32/2938_2.png) [@ahmaddanial](https://forum.mattermost.com/u/ahmaddanial)\
**Post date:** [September 22, 2019, 11:31pm UTC](https://forum.mattermost.com/t/api-authentication-when-using-gitlab-sso/7882/4 "2019-09-22T23:31:26Z")

</div>

Hi there.

Based on the [old article](https://forum.mattermost.com/t/launch-queries-on-the-mattermost-api-having-gitlab-as-authentication-provider/2625/8) I came across here, it seems that it is not possible to access Mattermost API via Gitlab SSO.

- [Enable ability to access mattermost API](https://gitlab.com/gitlab-org/kubernetes-gitlab-demo/issues/14#note_22585884)

I further came across the article above that you might be interested to check on though it was opened since the last 2 years. Perhaps you would like to revive the topic again?

---

<div class="post-metadata">

**Author:** ![mwcoop](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@mwcoop](https://forum.mattermost.com/u/mwcoop)\
**Post date:** [September 23, 2019, 1:48am UTC](https://forum.mattermost.com/t/api-authentication-when-using-gitlab-sso/7882/5 "2019-09-23T01:48:13Z")

</div>

As I don’t generally want users using email sign-in, can an admin manually create a user? I simply need a single admin user account with API access.

---

<div class="post-metadata">

**Author:** ![ahmaddanial](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/ahmaddanial/32/2938_2.png) [@ahmaddanial](https://forum.mattermost.com/u/ahmaddanial)\
**Post date:** [September 23, 2019, 3:19am UTC](https://forum.mattermost.com/t/api-authentication-when-using-gitlab-sso/7882/6 "2019-09-23T03:19:12Z")

</div>

Hello, @mwcoop

By default, admin(s) who have backend access to the Mattermost server can utilize the [mattermost user create](https://docs.mattermost.com/administration/command-line-tools.html#contents) CLI command to create user or use the [standard methods](https://docs.mattermost.com/help/getting-started/managing-members.html#inviting-team-members) to invite users to the team or even create users using the [API](https://api.mattermost.com/#tag/users%2Fpaths%2F~1users%2Fpost) if you prefer too.

However, you mentioned that you do not want users using email sign in. So, I am not quite sure how to go about this.
