tvdijen/simplesamlphp-module-ldapradius

A module that provides authentication against LDAP stores with additional MFA against RADIUS

v1.1.0 2026-03-03 21:14 UTC

Requires

• php: ^8.3
• ext-ldap: *
• simplesamlphp/assert: ^2.0
• simplesamlphp/composer-module-installer: ^1.7
• simplesamlphp/simplesamlphp: ^2.5@dev
• simplesamlphp/simplesamlphp-module-ldap: ^2.5
• simplesamlphp/simplesamlphp-module-radius: ^2.1
• symfony/http-foundation: ^7.4

Requires (Dev)

• simplesamlphp/simplesamlphp-test-framework: ^1.11

LGPL-2.1-or-later

• Tim van Dijen

• ldap
• simplesamlphp
• radius
• MFA

README

Combined LDAP / Radius authsource

Configuration

    'LDAPRADIUS' => [
        'ldapRadius:LdapRadius',

        // The primary authsource to deal with username & password
        'primary' => 'LDAP',

        // The secondary authsource to deal with username & OTP
        'primary' => 'RADIUS',

        // Type hint to be enforced by the browser for the username-field
        // Defaults to 'text', possible values are 'text' and 'email'
        'usernameTypeHint' => 'email',

        // The pattern to be enforced by the browser for the username-field
        // Defaults to `null`
        'usernamePattern' => null,

        // The minimum password-length to be enforced on the password-field
        // Defaults to `null`
        'passwordMinLength' => 8,

        // The input mode for the OTP-field. This will select the appropriate keyboard on mobile devices
        // Defaults to `null`
        'otpInputMode' => null,

        // The pattern to be enforced by the browser for the OTP-field
        // Defaults to `null`
        'otpPattern' => null,
    ],