Single Sign On With Drupal

Date: Monday, August 19, 2019

Single Sign On with Drupal

At DrupalGovCon 2019, CivicActions engineer Dan Gurin led a session on the sometimes tricky process of implementing Single Sign On (SSO) in Drupal. Dan loves building Drupal sites to meet the specialized needs of government clients, including making user management simple and secure.

In this session, Dan discusses use cases and gives advice on key questions that can help improve collaboration with government clients. He also talks through the practicals — such as how to install and configure SimpleSAML Service and Identity Providers, and how to leverage MAX.gov to further integrate SSO into existing government systems.

Watch Dan Gurin’s 2019 DrupalGovCon talk, “Single Sign On With Drupal”

Highlights

0:55 — Challenges to managing enterprise level user accounts
4:55 — What are the advantages of Single Sign On?
6:27 — Main providers in the SSO system
9:13 — Using Drupal as the service provider
10:12 — Getting set up with SimpleSAMLphp
12:40 — Setting up your templates
13:53 — Options for storing user session data
16:25 — How to set up session storage with SQL
16:50 — Why using symbolic links is a helpful practice
21:11 — How to protect certs and passwords with Project Settings
23:45 — Best practices for security
25:16 — Collaborating with your identity provider to set up metadata
28:26 — All about logging
29:50 — -Setting up attributes
32:15 — How to avoid getting locked out of Drupal (and how to get back in if you do)
33:40 — Setting up redirects when logging out
32:40 — Best practices for activating authentication
36:10 — Integrating MAX.gov to manage authentication
37:06 — Updating the SimpleSAML library

Resources

Connect with Dan