Azure AD SSO Login with Drupal OAuth Client | Drupal SSO Login

Drupal Azure AD SSO integration will allow you to configure Single Sign On ( SSO ) login between your Drupal site and Azure AD using OAuth/OpenID protocol. Drupal OAuth 2.0/OpenID connect module gives the ability to enable login using OAuth 2.0/OIDC Single Sign-On to Drupal Site. We provide the Drupal OAuth/OpenID Client module for Drupal 7, Drupal 8, and Drupal 9.
Here we will go through a guide to configure the SSO login between Drupal and Azure AD. By following these steps, users of Azure AD will be able to log into the Drupal site using their Azure AD credentials.
If you have any queries or if you need any sort of assistance in configuring the module, you can contact us at drupalsupport@xecurify.com. If you want, we can also schedule an online meeting to help you configure the Drupal OAuth & OpenID Connect Login – OAuth2 Client SSO Login module.

Video Setup Azure AD Single Sign-on Integartion with Drupal OAuth/OpenID Client

You can refer the steps to Configure Azure AD SSO integration with the Drupal OAuth/OIDC Client module from the Video or Documentation given below:

2. Setup Azure AD as an OAuth Provider

• Sign in to Azure portal.
• Click on Azure Active Directory from Azure services.

• In the left-hand navigation pane, click the App registrations service, and click New registration.

• When the Create page appears, enter your application's registration information:

Name :	Name of your application.
Application type :	Select "Native" for client applications that are installed locally on a device. This setting is used for OAuth public native clients Select "Web app / API" for client applications and resource/API applications that are installed on a secure server. This setting is used for OAuth confidential web clients and public user-agent-based clients. The same application can also expose both a client and resource/API.
Sign-on URL :	For "Web app / API" applications, provide the base URL of your app. eg, https://<domain-name>/mo_login might be the URL for a web app running on your local machine. Users would use this URL to sign in to a web client application. For "Native" applications, provide the URI used by Azure AD to return token responses. Enter a value specific to your application. eg, https://localhost/drupal

3. Integrating Drupal with Azure AD

When finished, click Register. Azure AD assigns a unique Application ID to your application. Copy Application ID and the Directory ID, this will be your Client ID and Tenant ID respectively.

Go to Certificates and Secrets from the left navigaton pane and click on New Client Secret. Enter description and expiration time and click on ADD option.

Copy value. This will be your Secret key.

Azure AD Endpoints and scope:

Scope:	openid email profile
Authorize Endpoint:	https://login.microsoftonline.com/[tenant-id]/oauth2/v2.0/authorize
Access Token Endpoint:	https://login.microsoftonline.com/[tenant-id]/oauth2/v2.0/token
Get User Info Endpoint:	https://graph.microsoft.com/beta/me

4. Test Configuration of Drupal with Azure AD

• After successfully saving the configurations, please click on the Test Configuration button to test the connection between Drupal and Azure AD.

• This Test Configuration window will provide you with a list of the attributes that are coming from the Azure AD.
• Select the Email Attribute from the dropdown menu in which the user's email ID is obtained and click on the Done button.

• Now, in the Attribute & Role Mapping tab, you can also choose the Username Attribute from the dropdown and click on the Save Configuration button.


Please note: Mapping the Email Attribute is mandatory for your login to work.

• Now log out and go to your Drupal site’s login page. You will automatically find a Login with Azure AD link there. If you want to add the SSO link to other pages as well, please follow the steps given in the image below :

24*7 Active Support

If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal OAuth/OpenID Single Sign On module.

Additional Resources

• What is OAuth 2.0?
• What is OpenID Connect?
• Frequently Asked Questions (FAQs)

Our Other modules