Earlier this afternoon, we made an improvement in synchronizing Science accounts to our LDAP infrastructure. The underlying problem was that, in some cases, new Science accounts did not have the correct group membership attributes in LDAP. When these new Science accounts tried to login to Gitlab, this would fail. The improvement should fix those inconsistencies, and allow new Science users to login to Gitlab without our manual intervention.
Although this improvement was not fully activated, a related change in the underlying database query filtered too many users. For <300 Science accounts, this meant that they could no longer login to Gitlab.
A fix has been deployed and access should be restored for the affected Gitlab accounts within the next half hour.
[Update 15:52] Access should have been been restored for the affected users.