Search Results :

×

Drupal OAuth Client
SSO Integration

The Drupal OAuth/OIDC Client module permits users to perform Single Sign-On (SSO) to your Drupal app via any Identity Providers (IdPs) such as Salesforce, Okta, Azure AD, and more.
Drupal OAuth Client - Banner Image

Our Trusted Customers

See All Customers →

  • Drupal | Drupal Passwordless Authentication - NASA
  • Drupal | Drupal Passwordless Authentication - Nestlé
  • Drupal | Drupal Passwordless Authentication - Sony Pictures
  • Drupal | Drupal Passwordless Authentication - UNICC
  • Drupal | Drupal Passwordless Authentication - Vodafone
  • Drupal | Drupal Passwordless Authentication - Wipro
  • Drupal | Drupal Passwordless Authentication - University of Virginia

How to setup Drupal Single Sign-On SSO?

wordpress media access control | Step1

Step 01

Install Drupal Drupal OAuth Client Module

Download and install the Drupal OAuth/OIDC Client module from the Drupal marketplace.

wordpress prevent direct access plugin | Step2

Step 02

Configure OAuth Application

Enter the scope and endpoints to configure your OAuth application.

wordpress media access control | Step3

Step 03

Copy Callback/Redirect URL

Finally, copy the Callback/Redirect URL and provide it to your application.

Innovative Security Features

Multi-OAuth Support

You have the liberty to add more than one OAuth-compliant IDP to your Drupal application, such as Auth0, Microsoft Entra ID, AWS, and more.

Attribute and Role Mapping

Attribute mapping integrates user data like email, username, display name, etc. from the OAuth Server to your client application, while role mapping allows you to determine access level to the users based on their roles from the IdP.

Account Linking + Provisioning

By chance, an user doesn’t have an existing Drupal account, the module auto creates a new Drupal account when the user logs in with their IdP credentials. Whereas, with account linking users connect their existing Drupal account with an external IdP account like Google, Okta, or Azure.

Role/Attribute/Domain-Based Restriction

This feature controls user’s access to the Drupal site by either allowing or blocking them based on their attribute values, email domains, or roles.

Custom OAuth/OpenID SSO

You have the privilege to customize your OAuth SSO flow. You can achieve this by selecting from a wide range of grant types, personalizing attributes/roles, and enabling domain restrictions.

Headless Support

With the Drupal OAuth Client SSO module, you can smoothly perform Single Sign-On on both - the frontend and backend, in case you’ve a decoupled Drupal architecture.

Active Drupal 7 Support

Currently, Drupal has ended its support for the Drupal 7 version, but our module continues to offer support for Drupal 7.

Multiple OAuth Providers

Multi-OAuth Support

You have the liberty to add more than one OAuth-compliant IDP to your Drupal application, such as Auth0, Microsoft Entra ID, AWS, and more.


Pricing Plans

STANDARD

$249/Year

No. Of Instances:
Select Versions:

  • Auto fill OAuth server configuration
  • Basic Attribute Mapping
  • Support for Authorization Code Grant
PREMIUM

$399/Year

No. Of Instances:
Select Versions:

  • Advance Role Mapping
  • Backdoor login
  • Force authentication / Protect complete site
ENTERPRISE
Most Purchased

$449/Year

No. Of Instances:
Select Versions:

  • Support for Refresh token
  • Activate blocked users upon SSO
  • Single Logout
SUITE

  • Bidirectional SCIM based User Profile Sync
  • Role Based Provisioning
  • Support for Group Provisioning
  • Seamless integration with any IdP
  • Real-time Roles & Groups Mapping

Compare Plans

Features

Standard

Premium

Enterprise

Auto fill OAuth server configuration Auto fill OAuth server configuration Auto fill OAuth server configuration Auto fill OAuth server configuration
Attribute mapping-basic (Email, Username) Attribute mapping-basic Attribute mapping-basic Attribute mapping-basic
Authorization Code Grant Support Authorization Code Grant Support Authorization Code Grant Support Authorization Code Grant Support
Export Configuration Export Configuration Export Configuration Export Configuration
Import Configuration Import Configuration Import Configuration Import Configuration
Auto-Provision Users Auto-Provision Users Auto-Provision Users Auto-Provision Users
Auto-Redirect to OAuth Server for Login Auto-Redirect to OAuth Server for Login Auto-Redirect to OAuth Server for Login Auto-Redirect to OAuth Server for Login
Debug Logs Debug Logs Debug Logs Debug Logs
Auto-Provision Users Auto-Provision Users Auto-Provision Users Auto-Provision Users
Attribute mapping - advanced (Custom Attributes) Attribute mapping - advanced (Custom Attributes) Attribute mapping - advanced (Custom Attributes) Attribute mapping - advanced (Custom Attributes)
Custom Login & Logout Redirects Custom Login & Logout Redirects Custom Login & Logout Redirects Custom Login & Logout Redirects
Basic Role Mapping (Set default role for new users) Basic Role Mapping Basic Role Mapping Basic Role Mapping
Advance Role Mapping (assign roles based on IDP Attributes)   Advance Role Mapping Advance Role Mapping
Backdoor login   Backdoor login Backdoor login
Enforce Authentication / Secure Entire Site   Enforce Authentication / Secure Entire Site Enforce Authentication / Secure Entire Site
OpenId Connect Support(Login using OpenId Connect Server)    OpenId Connect Support(Login using OpenId Connect Server)  OpenId Connect Support(Login using OpenId Connect Server)
Support for Implicit Grant   Support for Implicit Grant Support for Implicit Grant
PKCE Flow Support     PKCE Flow Support
Generate custom X.509 certificates     Generate custom X.509 certificates
Support for Password grant     Support for Password grant
Support for Refresh token     Support for Refresh token
Generate custom X.509 certificates     WordPress Onedrive Integration
Activate blocked users upon SSO     Activate blocked users upon SSO
Single Logout     Single Logout
Unlimited OAuth Provider Supported *      Unlimited OAuth Provider Supported
Generate custom X.509 certificates     WordPress Onedrive Integration
Headless Integration support     Headless Integration support
Domain restriction     Domain restriction
Persist Access and ID Tokens in Session & Cookies     Persist Access and ID Tokens in Session & Cookies
Attributes/Role based restriction     Attributes/Role based restriction
Drupal Groups Module Compatibility     Drupal Groups Module Compatibility
Drupal Profile Module Compatibility     Drupal Profile Module Compatibility
Dynamic Callback URL     Dynamic Callback URL
Page Restriction     Page Restriction
Development Hooks     Development Hooks
Login Reports / Analytics     Login Reports / Analytics
Personalized Login Button     Personalized Login Button

Discover our wide range of integrations

You can enable Single Sign-On in your Drupal site using our OAuth SSO module and connect it to any OAuth Provider. See our integration guides with the most popular Identity Providers.

Popular Usecase

Explore real-world use cases of the Drupal SAML SP Module to implement secure and seamless Single Sign-On (SSO).

Drupal Login and Session Control

This case study explores how a non-profit healthcare organization, with a massive interconnected ecosystem was struggling to sustainably protect their cyberspace. This was primarily with respect to user logins, auditing and controlling access to sensitive information. And since their entire ecosystem was split into multiple systems, a unified login and monitoring system was just the thing that the doctor prescribed.

Know More→

Drupal-SSO-Session-Management-UseCase

Frequently Asked Questions

FAQ | Module FAQsModule Inquiries

Does miniOrange store any user data?

miniOrange does not transfer any data out of your systems or store any Personal Identifiable Information (PII). All the modules are completely on premise. All the data remains within your premises / server. Only for the Drupal 2FA module - We need to store the user's email address. For Risk Based Authentication, information such as device type, location, IP address, and time are necessary to identify the user and give access based on the risk.

Does miniorange provide developer license for paid module?

We do not provide the developer license for our paid module and the source code is protected. It is strictly prohibited to make any changes in the code without having written permission from miniOrange. There are hooks provided in the module which can be used by the developers to extend the module's functionality.

Does miniOrange offer technical support?

Yes, we provide 24*7 support for all and any issues you might face while using the module, which includes technical support from our developers. You can get prioritized support based on the Support Plan you have opted for. You can check out the different Support Plans here.

How to activate the Premium Module on my Drupal Site?

  1. Once you complete the payment, go to the miniOrange Dashboard to download your premium module or followthe Composer installation steps.
  2. To activate the paid module, go to the Registration /Login tab and login with your miniOrange account for which you have purchased a license.
  3. Once you are logged in, it will ask you to enter your license key. Go to miniOrange Dashboard → License → View License Key to get your license key.

How can I free up my license Key?

You can remove the license key from the module by clicking on the Remove Account button from the Register/Login tab of the module.

Want to Schedule a Demo?

mo-form

 Thank you for your response. We will get back to you soon.

Something went wrong. Please submit your query again

Hello there!

Need Help? We are right here!

support