We have made significant saving on another product by putting a proxy doing Saml authentication in front of the app, rather than paying a crazy price that would have gotten us the Saml. Probably tougher to do for gitlab though.