This module allows your Drupal site to act as an OAuth or OpenID Connect server, enabling users to single sign-on into various third-party applications. It supports multiple grant types, customizable user information responses, and secure token handling for seamless integration.
Drupal OAuth Server module offers a hassle-free way for users to Single Sign-On (SSO) into any third-party applications (aka client application) like Salesforce, Slack, Magento, Jira, Azure, WordPress, Joomla, Bitbucket, AWS Cognito, Google, or any other OAuth or OIDC (OpenID Connect) compliant 3rd party application.
Know more Setup Guides Our unique case-studies
FEATURES ( Features supported in the free and premium versions of the module )
- OIDC Support: The Drupal OAuth Server module also offers OIDC protocol support. Thereby, allowing you to verify the identities of the users.
- Server Response: A customized user info response (attributes and roles) from your Drupal OpenID Connect Server is shared with the client.
- Supports All Grant Types: Prominent grants supported by Drupal OAuth Server are Authorization Code Grant, Implicit Grant, Password Grant, Client Credentials Grant, Refresh Token Grant.
- JWT Support & Signing Algorithm: Drupal OAuth Server offers JWT support. The signing algorithm ensures that the token is authentic and untampered during its transmission between server and client. Depending on compatibility with the client application, different signing algorithms can be chosen, such as HSA or RSA (supported with certificates).
- Multi-Site Support: The OAuth 2.0 server module supports connection with multiple client applications simultaneously such as Joomla, Magento, Bitbucket, Jira, and more.
- Enforce State Parameter: Enable or disable the check for state parameters as per the client application requirement.
- Redirect/Callback URI Validation: The OAuth 2.0 Server module offers the option to bypass callback URI validation while processing authorization requests, to deal with dynamic callback URIs, while maintaining other security measures.
- Ready for Modern AI Integrations: Authenticate AI agents, MCP servers, Microsoft Copilot integrations, and external AI applications using secure OAuth-based access controls.
- Token Length & Lifetime: The access token length, along with the lifetime of the access and ID tokens are configured as per the organizations’ security standards. Thereby, optimising both user experience and security constraints.
24/7 Support
If you face any issues or need any help in configuration, please feel free to reach out to us at [email protected]. You can also connect with us on the Drupal Slack channel.