Installation

Composer

composer require drupal/ldap_sso

The module depends on drupal/ldap (^4.4), which provides ldap_servers and ldap_authentication.

Enable modules

Enable at least:

• LDAP Servers (ldap_servers)
• LDAP Authentication (ldap_authentication)
• LDAP SSO (ldap_sso)

LDAP Authentication pulls in ldap_user and externalauth as needed for account mapping and provisioning.

drush en ldap_sso -y

Before you enable SSO in production

1. Configure and test an LDAP server entity (bind, base DN, user attribute).
2. Confirm the server bind method is not “user credentials” or “anonymous then user”—SSO never has the visitor’s password for Drupal to re-bind as that user.
3. Configure LDAP authentication / user provisioning for the accounts you expect SSO to log in.
4. Configure web-server authentication for /user/login/sso (see Web server setup).

For LDAP server and authentication setup, use the LDAP project documentation.