OpenID Connect
Premium Certified Partner
Maintained by
Enovation Dev Team, Lai Wei, Patryk Mroczko
The OpenID Connect plugin provides single-sign-on functionality using configurable identity providers.
Comments
Product ratings and reviews are coming to Moodle Marketplace. Until then, existing comments remain available to read, but new posts have been disabled.
We use 3.9.1 version of moodle.
I cannot successed old OIDC plugin methode. Everytime I login wants to update it.
I found that an old version of moodle (3.7 and 3.8) had the same problme and it was fixed later.
Is there any solution known for version 3.9.1+ because we really need to have this fixed.
New school year starts from 1st of September 2020 and I need to have 600 new students imported and working till then.
Please help ASAP!
I coldnt solve the issue, so I replaced the OIDC folder with the older version's folder. now it works again (proving that the o365 is proparly configured)
but plugin page is requesting update.
anyway, it works for now, untill I find the solution.
Runnig moodle 3.9.1 and oidc for authentication, new users cannot sign in
(current users can).
New (first time) users are forwarded to office365 login page, in the first try get the following error: "Error in API call: Insufficient privileges to complete the operation"
and then with every retry : "The existing token for this user does not contain a valid user ID"
Checked "auth_oidc_token" table, i see they get userid=0,
when checking the "users" table, they are not listed there at all
Deleting the userid=0 records from "auth_oidc_token" does not help, they get the same error and are again created only in the "auth_oidc_token" table.
To complete the picture
I have another moodle site with same configurations (as far as i can see) that seems to work fine (for same users)
Any Idea where to start ?
I have upgraded my moodle instance from version 3.7 to 3.8 including the some plugins.
Afterwards, I logged in with the admin user. Working.
Then checked a test user login, which was created and regularly synced with the plugin auth_oidc from Azure.
That doesn't work. I can create local users and login, but not with the users created and synced from Azure. (my problem)
I made a health check at Website-Administration -> Plugins -> local plugins -> Office365-Integration -> Advanced.
It replies: Office 365 API calls are executing at full speed.
I reran Azure-Setup within moodle, which states:
- Unified API is active
- Application Permissions Correct
- Permissions Correct
I syncronised users manually under scheduled tasks.
And received .... Could not assign user "user@domain.tld" Reason: No token available for usersync
Here may be my problem.
I cleaned OpenID Connect Tokens.
And checked Azure App-Registration within Microsoft Backend, which also seems fine.
I am a little lost now and ask you for help.
- Is this plugin with v3.7 still working with an v3.8 instance?
- And, does anyone have suggestions on the "auth_oidc" plugin issue and how to solve it?
Thanks to you all!
Martin
Now we have the problem if a user connect their account with the office365 account they were connected via the OpenID Connect and we lost them for our LDAP subscription (with the groups etc).
So is there a way to use the Office365 Plugins without OpenID connect, so that our students can use the office 365 integration and stay for our ldap subscription?
Looking forward to hear from you, thanks in advance
best regards
jtuttas
Please can you help to find Microsoft Official Documentation to create similiar AAD authentication plugin like this.
We website where we need to log in in similar conditions like this plugin. What we need is proper documentation link to this.
Thank you for your help.
Rein
EMKTS Seminary
We're trying to figure out creation of new user accounts. We do not have the auto create account setting turned on (currently set to prevent) because we have some AD users that should not be able to sign into moodle. When we create a new account and tell it to use Open ID connect, the user gets "Invalid login: User not found in Moodle. If this site has the "authpreventaccountcreation" setting enabled, this may mean you need an administrator to create an account for you first." when the attempt to sign in with the Open ID link to Office 365.
Is there a process by which newly created accounts can be automatically connected to Office 365/moodle accounts? The email address & username is the same. In this example, steadstudent1@university.edu is the O365 account, the moodle user is steadstudent1.
Thanks!
-Stead
This site has restrictions in place on the users that can log in with OpenID Connect. These restrictions currently prevent you from completing this login attempt.
We are using an Identity Server 4. Should this parameter be established there or can we just do it at the LMS?