Updated on 2012-05-03
Integrating Drupal with WebAuth
The WebAuth module for Drupal (WMD) for Drupal 6 and for Drupal 7 is an official module supported by IT Services and originally written by Ken Sharp that implements external logins using Stanford's WebAuth. It automatically creates new user accounts and assigns them Drupal roles (as of version 3.x) based on mappings between Workgroups and Roles as specified by the administrator. Logins are handled by WebAuth and not Drupal, which means one less username and password for people to remember.
Drupal sites installed using the collaboration tools installer, or those on the Stanford Sites Drupal hosting service come with the latest version of WMD installed. If you need to download it and install it manually, you can find it at wmd.stanford.edu.
A note about HTTPS
The WebAuth module requires HTTPS to work on your website. If you are hosting Drupal on Stanford Sites, at a www.stanford.edu URL or using a vanity URL that is handled by the WWW servers, HTTPS is enabled automatically. If you are using a vanity URL that is handled by the proxy service (see here on how to tell), you'll need to request that HTTPS be turned on for you by submitting a HelpSU ticket. You can check whether HTTPS works for your site by going to your regular URL but replacing http:// with https://. If you are redirected automatically to http://, HTTPS is not set up.
