OpenID Connect

We have Moodle 2.7. I've installed your plugin. But when I click on the OpenID Connect icon on the login page I get
[12-Mar-2018 21:31:10 UTC] Default exception handler: Error in OpenID Connect. Please check logs for more information. Debug:
Error code: erroroidccall
* line 47 of /auth/oidc/classes/utils.php: moodle_exception thrown
* line 252 of /auth/oidc/classes/oidcclient.php: call to auth_oidc\utils::process_json_response()
* line 177 of /auth/oidc/classes/loginflow/authcode.php: call to auth_oidc\oidcclient->tokenrequest()
* line 84 of /auth/oidc/classes/loginflow/authcode.php: call to auth_oidc\loginflow\authcode->handleauthresponse()
* line 105 of /auth/oidc/auth.php: call to auth_oidc\loginflow\authcode->handleredirect()
* line 29 of /auth/oidc/index.php: call to auth_plugin_oidc->handleredirect()
It looks like in utils.php there is a NULL value. Where do I start debugging this?

What happens if a username (upn) is updated in ADFS? As far as I can see in loginflow/authcode.php/handlelogin it then tries to login with the old username even though this was updated in Moodle as well.
Thanks,
Willem

Can we use the plugin for SSO with confluence and moodle ? We try to find singal sign on plugin for confluence and moodle . Thanks a lot.

We are currently using the OIDC plugin for Office 365 authentication. Would there be any benefit to moving from the OIDC plugin to the built in OAuth2 plugin available in Moodle 3.3 core? It seems to me that OIDC would be the better choice, but I was hoping to get input from those more knowledgeable than me.
Thanks

Hi,
I am trying to consume this library with existing Identityserver 3 integration.
I am using
$plugin->version = 2016120501;
$plugin->requires = 2016120500;
$plugin->component = 'auth_oidc';
$plugin->maturity = MATURITY_STABLE;
$plugin->release = '3.2.0.1';
and I have one client in Identityserver 3 with
redirect URI
Flow is Authorization code
Logout Uri and almost everything.
I have already tried this client(idsrv3) with another application and it is working fine.
In DashboardSite --> administration -->Plugins -->Authentication -->OpenID Connect
i have configure
Provider name = OpenID Connect
ClientId = same as idsrv3
Authorization endpoint= https://myidentityserver3.com/identity
Token Endpoint= https://myidentityserver3.com/identity/connect/token
Redirect URI = https://localhost/moodle/auth/oidc/
Authentication Method = Authorization Code Flow (recommended)
but it is not showing any link or any changes on my login page.
please suggest me if it works with identityserver3 or not.
if yes then what is I am missing?
Thanks,
ajay kotnala
kotnala.ajayk@gmail.com

Is there a way to get the 'email' attribute for the user, when using oidc to create a new account. This would be very crucial for me, since I got some automatic actions based on users email.

Hi,
I just installed installed Office 365 integration plugin and following the configuration steps but can't do the step 2: Set system API user. When I click 'Set User' button, I see the page with 'Please configure OpenID Connect server endpoint.' and on the browser console, I see the message: '/local/o365/acp.php?mode=setsystemuser:1 GET http://example.com/local/o365/acp.php?mode=setsystemuser 404 (Not Found)'. And when I visited the Sign-on URL 'http://training.aerothreads.com/auth/oidc/' I get the same message, too. I feel like I am missing something obvious, but I can't figure out. Does anyone have similar experience and how did you resolve this?
My Moodle version is 3.2.2+ (Build: 20170412)

@gopal You can do SSO with Azure AD using only this plugin. The rest of the Office 365 plugins provide additional features, but a simple SSO only requires this plugin.

@richard - Are you on the newest version of the plugins? There was a specific situation, fixed around November, that could lead to a user being switched to OpenID Connect auth. It is possible for users to switch their authentication using the plugins, but this is disabled by default (controlled via capability that users are not given automatically). So next steps I would recommend that you upgrade to the newest version of the plugins, and verify you have not granted any auth/oidc capabilities to the users in question.

Whether it's possible to do SSO using the OpenID connect plugin with Azure AD.
Also Is there office 365 plugin mandatory for SSO with Azure AD?

James, sorry for my late respons. I forgot to subscribe to this threat.
I can't find out what my users are doing, but still they get switched to OpenID authentication in Moodle. I only notice this when I get reports about users not being able to login. Upon checking, I always find out that the users are switched to OpenID in stead of SAML.
Is there any place where users can set this themselves? I can hardly imagine it. I think it happens when they click the Moodle TILE in the Office 365 environment. You know, the page where all the tiles are in Office 365 (tiles like Sharepoint, Delve, Word, etc. we have a Moodle tile there too.

@hari vege - Have you connected the existing Moodle user accounts to their Office 365 accounts using the Office plugins? Not sure whether you need help doing that or whether you have done that and are experiencing problems.

I have a set of users already added into my moodle site with their email addresses being uni addresses and their username being their student ID. I now want them to login to their moodle account through their office 365 credentials and still access their original accounts instead of ending up creating new accounts. Any help in this regard.

@chris - we don't have a plan for that at the moment but do feel free to submit a pull request on GitHub. All development is done in a unified repository for Office 365 Moodle development - https://github.com/Microsoft/o365-moodle.

Hi, has there been any consideration of allowing configuration of multiple providers with this plugin? If a 3rd party developed this functionality, would it be in scope for merging upstream?
E.g. O365 and HumanitarianID on the same Moodle site, both configured using the same instance of the OpenID connect plugin.