OpenID Connect
Open OpenID Connect page
Open Windows AAD Settings page
The OpenID Connect configuration page allows administrators to integrate OpenID Connect for single sign-on (SSO) authentication. Key settings include:
- Client Settings: Configure client ID, secret, and endpoints provided by the OpenID Connect provider.
- Mapping: Map OpenID Connect claims to Drupal user fields for seamless user data integration. This includes fields such as email, username, and profile information, ensuring that user data from the OpenID provider is accurately reflected in Drupal user accounts.
- Roles Assignment: Define how user roles from the OpenID Connect provider map to Drupal roles. This allows administrators to control access levels based on roles assigned in the OpenID provider, ensuring consistent permissions across systems. Roles can be mapped directly to Drupal roles, and any changes made in the OpenID provider will be reflected upon user login or session update.
- Authentication: Enable or disable OpenID Connect authentication for various site sections, allowing for flexible integration of SSO throughout the site.
Configuring OpenID Connect enhances security and streamlines user management by leveraging centralized authentication services, ensuring that user roles and data are consistently managed across platforms.
Current SSO Configuration via Azure AD
Section titled “Current SSO Configuration via Azure AD”| Setting | Value |
|---|---|
| Client ID | <your-client-id> |
| Client Secret | <your-client-secret> (From Keys module) |
| Authorization Endpoint | https://login.microsoftonline.com/<your-tenant>/oauth2/authorize |
| Token Endpoint | https://login.microsoftonline.com/<your-tenant>/oauth2/token |
| End Session Endpoint | <your-site-url>/ |
| Manual AD Group Mappings | Admin|<your-ad-admin-group> · Publisher|<your-ad-publisher-group> · Editor|<your-ad-editor-group> |