$ curl --header "PRIVATE-TOKEN: removed" https://gitlab.gnome.org/api/v4/users?extern_uid=uid=sophieherold,dc=gnome,dc=org\&provider=ldapmain
{"message":"403 Forbidden"}
That's what I expected, since the external authentication parts are also not visible in the user list. Or is something wrong with my query?