Access control

  • Password Policy

    This module supports enforcing restrictions on user passwords by defining password policies.

    4.0.3 ^9.1 || ^10 || ^11 Security coverage 51,894 sites
    70

  • Two-factor Authentication (TFA)

    Two-factor authentication for Drupal sites. Drupal provides authentication via something you know -- a username and password while TFA module adds a second step of authentication with a check for something you have -- such as a code sent to (or generated by) your mobile phone.

    8.x-1.13 ^10 || ^11 Security coverage 15,620 sites
    100

  • Simple OAuth (OAuth2) & OpenID Connect

    Simple OAuth is an implementation of the OAuth 2.0 Authorization Framework RFC.

    6.1.1 ^10.3 || ^11 Security coverage 25,127 sites
    100

  • SAML Authentication

    This modules allows users to authenticate against a SAML Identity Provider to log in to your Drupal site. (This means your Drupal site serves as a SAML Service Provider.)

    8.x-3.14 ^10.3 || ^11 Security coverage 19,493 sites
    100

  • OpenID Connect / OAuth client

    The OpenID Connect module provides a pluggable client implementation for the OpenID Connect protocol.

    8.x-1.5 ^9.5 || ^10 Security coverage 31,301 sites
    85

  • EU Cookie Compliance (GDPR Compliance)

    If you're interested in supporting or improving this module, please consider joining the #eu_cookie_compliance channel on Drupal Slack. While a maintainer may not always be able to respond quickly, others in the community might be able to offer help. Please also consider joining the #drupal-cms-privacy channel for more discussion around klaro and privacy areas.

    8.x-1.29 ^8.9 || ^9 || ^10 || ^11 Security coverage 49,800 sites
    73

  • ECA: Event - Condition - Action

    ECA is a visual automation and orchestration framework for Drupal.

    3.1.9 ^11.3 || ^12.0 Security coverage 20,826 sites
    100

  • Masquerade

    The Masquerade module allows site administrators (or anyone with enough permissions) to switch users and surf the site as that user (no password required). That person can switch back to their own user account at any time.

    8.x-2.2 ^10.3 || ^11.0 || ^12.0 Security coverage 51,258 sites
    83

  • CAPTCHA

    Add challenge-response tests to user-facing forms on your site to protect against spambot submissions. Other CAPTCHA types are supported via additional modules.

    2.0.10 ^9.5 || ^10 || ^11 Security coverage 177,866 sites
    78

  • Field Permissions

    The Field Permissions module allows site administrators to set field-level permissions to edit, view and create fields on any entity.

    8.x-1.5 ^9.5 || ^10 || ^11 Security coverage 46,419 sites
    80
    • Subscribe to Access control