sso_connector_oauth
No security coverage
Introduction
SSO Connector – OAuth 2.0 extends SSO Connector with OAuth 2.0 capabilities for modern SSO architectures.
It is focused on the Authorization Code flow with PKCE, improving security for browser and public-client login flows.
The module is designed to work with the IdP/SP model provided by SSO Connector core and can integrate with
simple_oauth when available.
Features
- Authorization Code + PKCE: secure OAuth login flow for modern clients.
- SSO Connector integration: built to coexist with the role model and routes of SSO Connector core.
- Flexible deployment: suitable for architectures where Drupal participates in OAuth-based SSO flows.
- Drupal 10/11 support: aligned with current Drupal core versions.
- Optional simple_oauth interoperability: can complement existing OAuth setups.
Post-Installation
After enabling SSO Connector – OAuth 2.0, configure it at:
Administration > Configuration > System > SSO Connector > OAuth.
- Enable OAuth functionality.
- Configure OAuth clients/applications.
- Define redirect URIs (must match exactly).
- Validate PKCE login flow end to end.
Requirements
- Drupal: 10 or 11
- Required: SSO Connector core module
- Optional: simple_oauth
Supporting this Module
Contributions are welcome. Bug reports, testing feedback, documentation improvements, and patches help make OAuth-based SSO in Drupal more reliable for everyone.