Skip to main content

​
About Drupal

Iru consumes Drupal core JSON:API (/jsonapi) for content types, nodes, users, roles, and related metadata. Drupal 8.7+ ships JSON:API in core - enable it under Extend. Authentication uses HTTP Basic (username + password). Serve the site over HTTPS so credentials are not sent in clear text.

​
How It Works

Authorization: Basic base64(username:password)
DetailValue
CategoryWeb CMS
AuthenticationBasic (Drupal user)
Official references: JSON:API module, Permission model.

​
Prerequisites

  • JSON:API enabled; https://YOUR_HOST/jsonapi returns resource discovery JSON.
  • Drupal user whose role may GET the bundles you care about.

​
Connect Drupal to Iru

Complete this tab before you connect the source in Compliance.
1

Sign in as an administrator

Sign in to your Drupal site with a user who can install modules and change configuration (Administrator or equivalent).
2

Open Extend (modules)

Go to Manage → Extend (or Administration → Extend, depending on your admin theme).
3

Enable JSON:API

Locate the JSON:API module. Enable it and apply any configuration import or cache rebuild Drupal prompts for.
4

Confirm permissions

Ensure the integration user or role Iru will use can GET JSON:API resources your controls need (often Anonymous is too broad; prefer a dedicated service account with minimal read).
5

Verify the JSON:API endpoint

In a browser or with curl, request your site’s discovery document (for example https://YOUR_HOST/jsonapi) and confirm Drupal returns JSON (not 403 or 404).
Continue on the Iru Compliance tab.

​
Troubleshooting

Check pop-up blocker settings for the Iru site and try again.
Enable JSON:API module.
Grant view permissions on relevant entity types.
Correct password; Drupal is case-sensitive.

​
Considerations

Prefer a read-only service account scoped to…

Prefer a read-only service account scoped to required content types.

Sources Management

Browse and manage every Compliance source.

Getting Started With Compliance

Frameworks, actions, and Artifacts.

Iru Overview

How Endpoint, Compliance, and Identity fit together.

Artifacts Management

Upload, review, and organize evidence from sources and actions.