Search Results :

×

Configure Drupal login using LDAP / Active Directory


The Drupal LDAP Login module allows your LDAP / Window Active Directory users to login to Drupal using their LDAP / Active Directory (AD) credentials. This module also supports Windows auto-login based on currently logged-in Windows users using the NTLM and Kerberos authentication protocol. We provide a Drupal LDAP AD SSO login module compatible with Drupal 7, Drupal 8, Drupal 9, and Drupal 10.

The user’s LDAP Authentication can be performed on various LDAP servers like Microsoft Active Directory, OpenLDAP, Azure AD, JumpCloud, OpenDS, FreeIPA, Synology, and other Directory systems. Here we will go through the steps required to configure the LDAP Integration on your Drupal site. By the end of this guide your users can login to Drupal using their LDAP server credentials.

Installation Steps:


  • Download the module:
    composer require 'drupal/ldap_auth'
  • Go to Extend menu on your Drupal admin console and enable the module by checking the checkbox and click on Install button.
  • Configure the module at
    {BaseURL}/admin/config/people/ldap_auth/ldap_config
  • Install the module:
    drush en ldap_auth
  • Clear the cache:
     drush cr
  • Configure the module at
    {BaseURL}/admin/config/people/ldap_auth/ldap_config
  • Navigate to Extend menu on your Drupal admin console and click on Install new module.
  • Install the Drupal miniOrange LDAP/Active Directory Integration - NTLM & Kerberos login module either by downloading the zip or from the URL of the package (tar/zip).
  • Click on Enable newly added modules.
  • Enable this module by checking the checkbox and click on Install button.
  • Configure the module at
    {BaseURL}/admin/config/people/ldap_auth/ldap_config

Steps to configure Drupal LDAP / Active Directory login module

  • Once you enabled the module, navigate to Configuration miniOrange Active Directory / LDAP Integration as shown in the below image.
  • Drupal LDAP module login - Click on miniOrange Active Directory/LDAP Integration from Configuration tab
  • Enter your LDAP/Active Directory server URL or IP address and click on the Contact LDAP Server button to test the connection. If you get any error, check troubleshooting.
  • Drupal Active Directory / LDAP server connection
  • Enter the service account username and password and click on the Test Connection & Proceed button.
  • Drupal Active Directory / LDAP binding
  • Select the appropriate search base from the Search Base(s) dropdown. Users located within this search base will be able to log in to your Drupal site using their LDAP credentials.
  • Select the username attribute from the Search Filter/Username Attribute dropdown. This is the LDAP attribute your LDAP users will use to log in to your Drupal website.
  •  Drupal LDAP / AD search base and search filter
  • Check the “Enable login with LDAP” checkbox to enable LDAP Authentication on your site.
  • Check the Enable Auto-Registering of users in Drupal to automatically create your LDAP user's account in Drupal upon LDAP authentication if they do not already exist in Drupal.
  • Drupal LDAP Login and Active Directory SSO Enable Login with LDAP
  • Click on Save & Next button.
  • To enable Windows auto login using NTLM or Kerberos authentication protocol, Go to the NTLM & Kerberos tab, check the checkbox highlighted below, and click Save button to save your settings.
  • Drupal LDAP Login and Active Directory SSO - Enable the NTLM and Kerberos Login

Test User LDAP Authentication:

  • Under the LDAP Configuration tab scroll down to the Test Authentication section.
  • Enter your LDAP user’s username and password and click on the Test Authentication button. Remember, the username should match the LDAP attribute value you chose in the search filter dropdown.

    For example, if you selected 'uid' in the search filter, enter the 'uid' of your LDAP user as the username.

  • After successful authentication, you will get a list of all LDAP attribute values associated with your user. From the Email Attribute dropdown select the LDAP attribute under which you get your user's email address and click on Save & Next button.
  • Drupal AD/LDAP test authentication

How to login to Drupal using LDAP credentials?

  • Open a private/incognito window and go to your Drupal site login page.
  • Enter the user's LDAP credentials. Remember, the username should match the LDAP attribute value you chose from the search filter dropdown
  • Drupal LDAP Login and Active Directory SSO Enable the NTLM and Kerberos Login

After successful LDAP authentication, you will be able to access your Drupal site. If you face any error check the troubleshooting or reach out to us at drupalsupport@xecurify.com

Additional Features:

Troubleshooting:

 Can't contact LDAP server
  • Ensure you've entered the correct LDAP server URL and selected the right port number.
  • If you have a firewall, open the firewall to allow incoming requests to your LDAP from your Drupal Server IP and port 389.

If you are still having problems, drop us an email at drupalsupport@xecurify.com

 Operations error while Test Authentication
  • Ensure you've connected to the LDAP server with a valid Service account username that has permission to search under the Directory.

If you are still having problems, drop us an email at drupalsupport@xecurify.com

 Frequently Asked Questions (FAQ)
 Case Studies
miniOrange has successfully catered to the use cases of 400+ trusted customers with its highly flexible/customizable Drupal solutions. Feel free to check out some of our unique case studies using this link.
 Other Solutions
Feel free to explore other Drupal solutions that we offer here. The popular solutions used by our trusted customers include Two Factor Authentication - 2FA/MFA, IDP, REST API, User Provisioning and Sync. 
  24*7 Active Support
The Drupal developers at miniOrange offer quick and active support for your queries. We can assist you from choosing the best solution for your use case to deploying and maintaining the solution.
Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com