5. Sign In Settings

5.1 Base URL

  • Some providers such as Azure AD, Azure B2C, facebook etc. supports only HTTPS Callback URL (However, HTTP URL will work in the case of localhost). So, if your site is currently in HTTP, you can change it in HTTPS by following the below-mentioned steps:

    • In the Base /Site URL text field, enter your Drupal site’s base/root URL with HTTPS ( For eg. if your site is http://abc.com, you will need to save this value: https://abc.com ).

    • Click on the Update button.

    Drupal OAuth client base url

5.2 Signin Settings Features

  • Following are the features which are provided in the Paid modules :

Drupal OAuth client signin settings

1. Protect your complete Drupal website :

​ This feature will allow you to restrict anonymous access to your drupal site by automatically redirecting a non-logged-in/anonymous user to the OAuth Provide's login page.

2. Auto redirect the user to OAuth Server :

​ This feature will allow you to restrict your users to login in your drupal site using their drupal credentials. In this feature, whenever any of your users tries to access the drupal login page, they will be automatically redirected to the OAuth Provider's login page.

3. Backdoor Login :

​ Enabling Backdoor login will provide you with the secret URL that will allow you to login to your drupal site using drupal credentials even when the Protect Your Website or Auto Redirect User to OAuth Server feature is enabled.

5.3 Domain Restriction

  • This feature allows you to restrict the user login based on configured domains. You can allow/deny the user login based on the email domain.

  • There are 2 ways to use this feature:

    1. Allow only some of the domains

      • Using this feature, only the users of the specified domains will be allowed to login or register using SSO.
      • You can add the domain in the configuration, like shown below, separated by commas (,)

      Drupal OAuth client domain restriction

    2. Block some of the domains.

      • Using this feature, only the users of the specified domains will be restricted to login. Remaining all the users will be allowed to login.
      • You can add the domain in the configuration, like shown below, separated by commas (,)

      Drupal OAuth client domain restriction

5.4 Page Restrction

  • This feature allows page-based restrctions over users based on they are logged in or not. This feature will redirect the user to the OAuth/OpenID provider if the user tries to access the page without logging into the site.

Drupal OAuth client page restriction