OpenID Connect

Hello,
I updated a working moodle 5.0.3+ with oidc to 5.1 anf got the error : "Authentication plugin oidc not found."
I made all possible tests but didn't solve this.
oidc doesn't work with an update to moodle 5.1.
Of course I set apache doc root to folder 'public' as needed by 5.1.
Any experience or solution ?
Thanks for anby help.

Was looking for the setting to auto create users if not in moodle and they don’t have it like in saml. The global “authpreventaccountcreation” in Manage authentication acts as a master switch for all auth plugins, including OIDC. We keep it unchecked to allow auto-creation, which it is now.
where in Moodle do I make sure that users who have never logged in their user accounts are created and under OIDC AUTHENTICATION exclusively when we turn off SAML? Where is that setting in Moodle Manage Authentication, OIDC and Microsoft 365 Integration local plugins? In SAML, we can do that and there is a setting. Where is the OIDC similar operation to it ?
is this correct?

Hello, is the current version compatible with Moodle 5? If not, when is a compatible version expected to be released? Thank you

Hello,
I have installed Moodle version 4.5.3 with the OpenID Connect plugin (https://moodle.org/plugins/auth_oidc).
Authentication works perfectly and I have no apparent problems.
However, the refresh token code was missing in the plugin, so I coded it myself.
Once I had installed my updated plugin, I noticed that my OIDC server (Keycloak) wasn't receiving any token renewal requests.
So I deduce that Moodle itself renews the token without going through the authentication system (OIDC in my case).
Do you know how to force OIDC to refresh the token?
Thanks for your help
[Ticket from https://moodle.org/mod/forum/discuss.php?d=468069]

Hi Michael, all the Microsoft plugins are being tested for 4.5 at this moment, next release will be in a couple weeks. Kind Regards

When do you think we can expect to see a release for Moodle 4.5 LTS?

Thanks Csaba. This is really appreciated.

Hi Andrew,
I found the solution with some help:
On the "Sync settings page" of the Microsoft 365 Integration module I have to check 2 checkboxes:
- Update accounts in Moodle for users in Microsoft Entra ID
- Perform a full sync each run
The defualt run time is 2:00 am, but you can run manually on Scheduled tasks: Sync users from Microsoft Entra ID
After this, the missng profile fields were successfully updated

Hi Csaba, I hope all is well. Please can you let me know if you found a solution.

We have just launched a new Moodle 4.1 site with OpenId connect authentication. The authentication works well and the synchronization of the basic profile fields (name, e-mail) is ok, but any other profile fields are not synchronized.
Microsoft Graph seems to be set up well, but still the profile fields set on the Field mapping page do not appear in the Moodle profiles. Anyone have any ideas? TIA

When using "Microsoft identity platform (v2.0)" IdP type, use v2.0 endpoint, e.g.
When using "Microsoft identity platform (v2.0)" IdP type, use v2.0 endpoint, e.g.
https://login.microsoftonline.com/common/oauth2/v2.0/authorize

Hello,
Thank you for the plugin!
We attempted to connect Keycloak with Moodle 4.2.2+ (Build: 20230822) using this plugin.
We have taken the following steps:
1- We created the client in Keycloak.
2- We set the redirect URI (provided by the plugin) in Keycloak.
3- In the plugin settings, we configured the authorization endpoint, token endpoint, resource, identity provider (IdP) type: other, and client secret.
4- We tested logging in. We were able to log in using OpenID, which directed us to Keycloak. However, when it attempted to redirect to Moodle, we encountered the following error:
403 Forbidden
You don't have permission to access this resource.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Could you please help us?

Good morning everyone, I have a problem that I can't solve with Open Id connect, could you help me? I'm trying to make open Id connect work in our school, in a Moodle 3.2 platform with the old version 4.0.1
2022041905 of open id connect everything works perfectly.
With the new version of Moodle 4.2 and the specific open id connect plugin for Moodle 4.2 nothing works anymore. The version of the Opne Id connect Plugin that does not work is this: 4.2.2 ; 2023042410
Activity ID: 55b79301-a33f-43fa-0646-0080010000ad
Relying party: test.formazione-polizia.ti.ch
Error details: MSIS9223: Received invalid OAuth authorization request. The received 'client_id' is invalid as no registered client was found with this client identifier. Make sure that the client is registered. Received client_id: 'https://test.formazione-polizia.ti.ch/auth/oidc/'.
Node name: f7ab8949-9558-457d-8280-11bf8f605f8d
Error time: Tue, 14 Nov 2023 18:45:35 GMT
Cookie: enabled
User agent string: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0
Can anyone help me? Thank you

I see the OpenID Connect login along side manual uid/pwd login. I click the OpenID Connect login. I get redirected to the Windows server and authenticate. I get redirected back to Moodle. But I see this: "Error in OpenID Connect: Wrong authentication method used. MUST use 'client_secret_basic'" It appears that the Windows server is posting the response. Why does this plugin not handle it? Is there a setting I'm missing to set up installation? Thanks

Hey,
I wonder if the plugin could be used for Clever SSO integration into Moodle?
Kateryna