Skip to content

Developers overview

LDAP SSO is a small Drupal module. It does not implement directory binds or account provisioning. It reads an authenticated username from the web server, normalizes it, and hands it to ldap_authentication’s SSO login validator.

What this module owns

Piece Role
LoginController /user/login/sso — read identity, call validator, finalize session
LdapSsoBootSubscriber Seamless redirect for anonymous requests (KernelEvents::REQUEST, priority 30)
ServerVariableLookup Default $_SERVER[$variable] reader
LdapSsoAdminForm Config UI for ldap_sso.settings
hook_user_logout sso_stop cookie + optional logout redirect

What it does not provide

  • No custom plugin types
  • No Symfony events of its own
  • No hook_ldap_sso_* extension hooks

Further behavior changes belong in the LDAP stack (ldap_authentication, ldap_user, ldap_servers) or by replacing the ldap_sso.server_variable service.

Next