This documentation applies to GitLab.com Silver tier and above.
For SAML on self-managed GitLab instances, SAML OmniAuth Provider can be used. SAML SSO for GitLab.com groups requires SCIM to sync users between providers. If this is not used, group owners will still need to manage user accounts, for example removing users when necessary.