pasaia-udala/auth-bundle

Dual authentication bundle for Symfony: LDAP (Active Directory) + Certificate (Izenpe OAuth2)

v1.5.1 2026-03-27 11:54 UTC

Requires

• php: >=8.1
• ext-ldap: *
• ikerib/giltza-oauth2: ^1.0
• knpuniversity/oauth2-client-bundle: ^2.19
• symfony/config: ^6.4|^7.0|^8.0
• symfony/dependency-injection: ^6.4|^7.0|^8.0
• symfony/framework-bundle: ^6.4|^7.0|^8.0
• symfony/http-kernel: ^6.4|^7.0|^8.0
• symfony/security-bundle: ^6.4|^7.0|^8.0

Requires (Dev)

• phpunit/phpunit: ^10.0|^11.0
• symfony/phpunit-bridge: ^6.4|^7.0|^8.0

MIT

• Pasaia Udala

• symfony
• Authentication
• oauth2
• bundle
• ldap
• certificate
• active-directory
• giltza
• izenpe
• pasaia
• dual-auth

README

Dual authentication bundle for Symfony: LDAP (Active Directory) + Digital Certificate (Izenpe OAuth2 / Giltza).

Features

• LDAP authentication: Active Directory compatible with recursive group search
• Certificate authentication: Izenpe integration via OAuth2 (Giltza)
• Visual selector: page to choose authentication method (LDAP or Certificate)
• Role mapping: maps LDAP groups to Symfony roles
• Automatic integration: when a user authenticates by certificate, the bundle looks up their LDAP account by DNI
• Event system: customize roles and post-authentication actions
• Cache: optional cache for LDAP groups and attributes
• Built-in controller: ready-to-use routes without creating your own controllers
• Fully configurable: via YAML

Requirements

• PHP >= 8.1
• ext-ldap extension
• Symfony 6.4, 7.x or 8.x
• KnpUOAuth2ClientBundle >= 2.19
• ikerib/giltza-oauth2 >= 1.0

Documentation

• Full installation guide -- step by step, from scratch
• Configuration reference -- all available options
• Events -- customize roles and post-login actions
• Troubleshooting -- common problems and solutions

Quick install

composer require pasaia-udala/auth-bundle

For the full step-by-step guide, see docs/INSTALLATION.md.

License

MIT

Author

Developed by Pasaia Udala (IT Department)