Access control

  • Password Policy

    This module supports enforcing restrictions on user passwords by defining password policies.

    4.0.3 ^9.1 || ^10 || ^11 Security coverage 56,540 sites
    70

  • Two-factor Authentication (TFA)

    Two-factor authentication for Drupal sites. Drupal provides authentication via something you know -- a username and password while TFA module adds a second step of authentication with a check for something you have -- such as a code sent to (or generated by) your mobile phone.

    8.x-1.13 ^10 || ^11 Security coverage 17,649 sites
    100

  • Simple OAuth (OAuth2) & OpenID Connect

    Simple OAuth is an implementation of the OAuth 2.0 Authorization Framework RFC.

    6.1.3 ^10.3 || ^11 Security coverage 27,587 sites
    100

  • SAML Authentication

    This modules allows users to authenticate against a SAML Identity Provider to log in to your Drupal site. (This means your Drupal site serves as a SAML Service Provider.)

    8.x-3.14 ^10.3 || ^11 Security coverage 21,326 sites
    100

  • OpenID Connect / OAuth client

    The OpenID Connect module provides a pluggable client implementation for the OpenID Connect protocol.

    8.x-1.6 ^9.5 || ^10 || ^11 Security coverage 33,088 sites
    100

  • EU Cookie Compliance (GDPR Compliance)

    If you're interested in supporting or improving this module, please consider joining the #eu_cookie_compliance channel on Drupal Slack. While a maintainer may not always be able to respond quickly, others in the community might be able to offer help. Please also consider joining the #drupal-cms-privacy channel for more discussion around klaro and privacy areas.

    8.x-1.29 ^8.9 || ^9 || ^10 || ^11 Security coverage 52,406 sites
    73

  • ECA: Event - Condition - Action

    ECA is a visual automation and orchestration framework for Drupal.

    3.1.10 ^11.3 || ^12.0 Security coverage 25,108 sites
    100

  • Masquerade

    The Masquerade module allows site administrators (or anyone with enough permissions) to switch users and surf the site as that user (no password required). That person can switch back to their own user account at any time.

    8.x-2.2 ^10.3 || ^11.0 || ^12.0 Security coverage 57,010 sites
    83

  • CAPTCHA

    Add challenge-response tests to user-facing forms on your site to protect against spambot submissions. Other CAPTCHA types are supported via additional modules.

    2.0.10 ^9.5 || ^10 || ^11 Security coverage 194,907 sites
    78

  • Field Permissions

    The Field Permissions module allows site administrators to set field-level permissions to edit, view and create fields on any entity.

    8.x-1.5 ^9.5 || ^10 || ^11 Security coverage 51,474 sites
    80
    • Subscribe to Access control