Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.
This project is not covered by Drupal’s security advisory policy.
There is an open security issue: Logout route is not protected against CSRF
The BasicShib module provides shibboleth authentication and offers a plugin interface to enable developers to extend its functionality.
This module works similarly to the shib_auth plugin for Drupal 7, but focuses only on authentication and delegates more complex tasks such as role assignment to plugins.
To configure, enter the login/logout handlers and attribute names into the configuration form at Configuration > People > BasicShib Settings.
Note: there are currently a few settings that are not exposed to the UI. You may configure settings by modifying the configuration files directly. Most notably, we require that you edit the auth filter configuration file to enable auto-provisioning of accounts when new users log in with Shibboleth.
Plugins
- UserProvider - loads users. An example use case for overriding would be for sites that want map users to a username that doesn't match the SSO IDs.
- AuthFilter - apply additional authentication rules, e.g. require additional attributes besides username and email
Version 2 and 3
Duke University hosted a diversity and inclusion initiative, called Code+ to "…attracting students from underrepresented communities, including first-generation college students." You may read more about this initiative here. Among the 10 summer projects was the "Drupal Module for Software Design and Development" project. We chose this project since it was internally developed and we were able to use the groundwork to allows students to acquire new paradigms of coding and collaborating using an existing reliable Drupal contributed module.
Version 2
Version 2, dev branch only, reflects changes to port the 8.x branch to 9.x compatibility. It also incorporates several necessary patches.
Version 3
Version 3, dev branch only adds a new Grouper integration plugin.
- Grouper - grants user roles collectively to users sharing certain attributes, as managed by the InCommon Grouper software. Project led by Screenack and developed by jason_shang, tomas_esber_duke, jy300, cm524 and melannienimocks from Duke University’s Code+ Program.
Additional community support
We wish to acknowledge those who generously shared their time and knowledge with our project.
Supporting organizations:
The 2021 Code+ Summer Program
Project information
- Project categories: Access control
785 sites report using this module- Created by iaha on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
Releases
3.0.11
released 20 May 2025
Works with Drupal: ^10 || ^11
Drupal 10/11 Shibboleth authentication module, with optional Grouper authorization
Install:
Development version: 3.0.x-dev updated 20 May 2025 at 15:52 UTC
