Just-in-time provisioning of Drupal user accounts based on SAML attributes (configurable). Automatic role assignment based on SAML attributes (configurable). Dual mode - support for traditional Drupal accounts and SAML-authenticated accounts at the same time (configurable). Support for multiple authentication protocols (thanks to SimpleSAMLphp) OpenID (e.g., Google, Yahoo) Facebook OAuth (e.g., Twitter) SAML 1.1 Shibboleth 1.3 A-Select X509 Client Certificates Radius Example Use Cases Enterprise single sign-on - connect a Drupal site to your organization's IdP (like connecting Google Apps to your IdP) Single sign-on across Drupal sites on multiple servers - set all the sites up to use this module to authenticate users against one or more IdPs. (This can even be done with a multiple sites using a single SimpleSAMLphp service provider.) Federated Drupal site - allow people from multiple organizations to access the site using their organization's IdP.