hooking into my comment on contribution friction, have you already looked at admin confirmation for new accounts instead of bouncing them earlier during registration? I’d require someone as you to have a gitlab admin role.
Imo if the user has an existing forum account it’s a good indicator to allow the registration. As said with your new SSO backend you can also do more magic in gitlab