LDAP Single Sign On

The LDAP Single Sign-On module allows an administrator to configure a Drupal site to use either NTLM or Kerberos to authenticate Drupal users.

In short, it relies on the $_SERVER web server variable to integrate a site within a managed domain. The net effect is that either automatically or by visiting a link, a user is authenticated and logged into a Drupal site without requiring the user to enter credentials on suitably configured installations manually.

Note that this module is not an SSO provider usable over the public internet without additional middleware. Look at SimpleSAML and similar modules if you are looking for this.

LDAP SSO is usable together with the matching release from LDAP. See the release notes for further information.

Setup information

For more information on configuring Apache to provide NTLM / LDAP authentication, see the README.md/txt (also provided under external documentation).

This module requires the LDAP suite of modules to be installed and fully configured for proper operation.

Develop LDAP Single Sign On using DDEV ⚙

If you haven't already, install DDEV.

git clone git@git.drupal.org:project/ldap_sso.git
cd ldap_sso
ddev config --project-type=drupal --docroot=web --php-version=8.4 --corepack-enable --project-name=ldap-sso
ddev add-on get ddev/ddev-drupal-contrib
ddev add-on get s-ayers/ddev-drupal-contrib-mkdocs
ddev start
ddev poser
ddev symlink-project
ddev drush site:install -y
ddev drush pm:install ldap_sso -y
ddev drush config:export -y
ddev drush user:login

Consider sponsoring DDEV development.