Drupal OAuth Client
SSO Module

Map user attributes like email, username, and display name directly from your OAuth provider into Drupal using the Drupal OAuth Client module. Automatically assign Drupal roles based on roles or groups received from the OAuth Provider, ensuring users get the right level of access the moment they log in.

The Drupal OAuth Client module automatically creates new user accounts during login if they don't already exist, no manual provisioning required. Existing Drupal users can also link their accounts to external providers like Google, Okta, or Azure AD, enabling seamless Drupal OAuth SSO without losing their existing profile or content.

Control exactly who can log in to your Drupal site by allowing or blocking users based on email domain or specific OAuth attributes. A flexible way to enforce access policies and keep authentication secure, without relying on manual user management.

Built on OAuth 2.0 Authorization Code flow with full PKCE (S256) support to prevent code interception, essential for SPAs and public clients. A state parameter adds CSRF protection, keeping every login aligned with modern security standards.

Export and import all provider configurations, attribute mappings, and role rules as JSON, making it easy to replicate setups across dev, staging, and production. Fully integrated with Drupal's config management system for clean, version-controlled deployments.

Track every SSO login attempt with detailed audit logs — username, email, provider, IP address, navigation URL, timestamp, and success/failure status. Built to satisfy SOC 2, ISO 27001, and HIPAA requirements, giving auditors the per-attempt visibility they need without extra tooling.

The Drupal OAuth Client module delivers seamless OAuth SSO and OIDC authentication across decoupled architectures, securing both frontend and backend in headless Drupal setups. Ideal for modern stacks where Drupal powers the API while React, Vue, or Next.js handles the experience.