Don't check external authorization when disabling the service

app/services/application_settings/update_service.rb

@@ -7,7 +7,8 @@ module ApplicationSettings
     attr_reader :params, :application_setting
 
     def execute
-      validate_classification_label(application_setting, :external_authorization_service_default_label)
+      disable_ext_auth = params[:external_authorization_service_enabled].present? && !Gitlab::Utils.to_boolean(params[:external_authorization_service_enabled])
+      validate_classification_label(application_setting, :external_authorization_service_default_label) unless disable_ext_auth
 
       if application_setting.errors.any?
         return false

changelogs/unreleased/66443-unrecoverable-configuration-loop-in-external-auth-control.yml

+---
+title: Don't check external authorization when disabling the service
+merge_request: 32102
+author: Robert Schilling
+type: fixed