SAML SSO - Service Provider

The module functions as a SAML Service Provider (SP) and can be configured to enable Single Sign-On (SSO) between the Drupal site and a SAML-compliant Identity Provider (such as Microsoft Entra ID, Google Apps, ADFS, Salesforce, Okta, Shibboleth, and miniOrange, and others.) This configuration ensures the secure authentication between Drupal site and IdP.

Know more Handbook

Module Features

• Easy Configuration: Quickly configure the module with any SAML-compliant IdP using a few simple steps. Comprehensive documentation is available for guidance. Supports setup via metadata URL or metadata file.
• Multiple IdP Support: Allows configuration of multiple IdPs.
• Single Logout (SLO): The module supports the SLO feature. With this feature, users can log out of Drupal and automatically be logged out of all connected Identity Providers (IdPs).
• Strict IdP-Based Login: Enforces login using only IdP credentials, redirecting users to the IdP and restricting access to the Drupal login page.
• Profile Module Mapping: Supports mapping attributes to profiles created using the profile module.
• Attribute Mapping: Map IdP attributes to Drupal user fields seamlessly.
• Role Mapping: Assign user roles in Drupal based on attribute values from the IdP.
• Attribute-Based SSO: Control user login based on IdP response attributes like role, department, or group membership.
• Domain-Based IdP Redirection: Redirect users to specific IdPs based on their email domain in multi-IdP setups.
• Post-Login/Logout Redirection: Redirect users to a static page after login or logout.

Note: Few features are available in the upgraded versions of the module.