SSO User Support

[devonwarren]

We have marge-bot setup in our environment however we enforce SSO on all user accounts. This leads to an issue where we would need to frequently authenticate the user manually whenever we see the error ERROR: Cannot find valid SSO session. Please login via your group's SSO in the logs and the pod would do a crashloop. Is there any way around this?

If we can create an access token at the Project/Group level that doesn't require SSO can we use that to do the actual merging while still having the user account there to just be assigned the MR? Or is there any workflow that doesn't involve a user at all?

Our environment uses Google for SSO against Gitlab, agent is hosted in k8s, and doing a fast forward merge with squash if any of that info helps