OpenID Connect

Hi Richard - can you provide any more information about what your users might be doing to initiate this? There are a few places where a user can switch to OpenID Connect, but it shouldn't happen without some kind of intentional action.

Correction: version 30.0.0.5

We are using SAML for Moodle authentication. We have this plugin installed but disabled. Yet every day some users automatically get set to OpenID authentication.
I think this happens when they are logged into Moodle and they go single sign on to Office 365. Somewhere the user is set to OpenID... after that they can no longer log in to Moodle.
We are using Moodle 3.1 and OpenID 3.0.0.5. Is this bug known?

Hi I've setup the OIDC plugin using the Client ID and Key given from AZURE AD
I left my Auth Endpoint and Token Endpoints as the defaults (login.windows.... so on)
The redirect URI is http://our.moodle.server.com/auth/oidc/
I've used Authorization Request
Running version 2.9
I get the following error when setting an admin account for the Office plugin:
OIDC id_token not received.
with the following debug information:
Debug info:
Error code: errorauthnoidtoken
Stack trace:
line 145 of /auth/oidc/classes/loginflow/authcode.php: moodle_exception thrown
line 77 of /auth/oidc/classes/loginflow/authcode.php: call to auth_oidc\loginflow\authcode->handleauthresponse()
line 92 of /auth/oidc/auth.php: call to auth_oidc\loginflow\authcode->handleredirect()
line 29 of /auth/oidc/index.php: call to auth_plugin_oidc->handleredirect()
Any idea what's wrong here?

Hi all,
I received an email from Azure Team as following...
---------------
"On August 15, 2016, the Azure Active Directory (Azure AD) signing key will roll over. Your application(s) may experience downtime if it does not automatically handle this rollover. ...
If the application does not handle the signing key rollover, the application needs to be updated to the new signing key manually."
---------------
I'm not sure whether OpenID can handle the signing key rollover automatically.
If it is not, what should I do?
Thanks
Zurina

Dear James, Yes, I can confirm, now, everything works correctly. Thank you again for your work.

Hi Márton - the PHP 5.4 issue was just resolved in the newest version of repository_office365 - see https://moodle.org/plugins/repository_office365. Please let me know how the upgrade goes and if it resolves the issue. Thanks!

Dear James, that is right, the server runs PHP 5.4. I am waiting for the patch, thank you very much!

Thanks for that Márton - that illustrates what's going on perfectly. It looks like we have an incompatibility with PHP 5.4 - I'm guessing that's the version of PHP you have? We'll get a fix out as soon as we can - if you have the ability to upgrade your PHP version to 5.5 or higher that will also resolve it immediately. Thanks!

Dear James, Thank you for your help. There is no error message or white page, the web browsers just refuse to load the site (EDGE gives me error code 500). When I delete the files connecting to O365 plugins I can log back successfully. I have activated the debug mode and now I get this line: "Fatal error: Can't use function return value in write context in /XXX/XXXX/XXXXX/XXXXXXXX/repository/office365/lib.php on line 214" where X is the URL of my site.

Hi Márton - currently resolving the missing 3.1 OpenID Connect version here - thanks for bringing that to our attention.
As for the crashing issue you're experiencing - do you receive an error message when your install crashes? If it's just a white page, can you enable developer debugging and display debug messages? Explained below if you're unfamiliar with that:
If you are able to log in to Moodle some other (before installing the plugin, for example), can you go to Site Administration > Development > Debugging, and set "Debug messages" to "Developer" and enable "Display debug messages". Click Save changes.
If you are not able to log in to Moodle (on a crashing site, for example), can you add the following:
$CFG->debug = 32767;
$CFG->debugdisplay = 1;
to your Moodle's config.php file. This will force developer debugging and display error messages.
If you can get us the error message that is causing the crash we can help resolve the problem or fix whatever might need fixing. Please note that you should disable developer debugging and display debug messages after getting the error message. (i.e. remove the config.php lines or reset the settings in the UI).
Thanks!

Dear Charles Verge, I removed everything and I did a clean install with Moodle 3.1.1+ this morning. I uploaded the whole O365 set from github, updated the database and... it crashed just as my old 3.1. It was a clean install without any other plugins. Any ideas?

Dear Charles Verge, Thank you for your answer. The problem is, that if I update oidc plugin from github my moodle installation crashes. I have to delete either oidc or office365 folders in order to get back to my site. I have restored my installation to the point before the upgrades took place and I tried different methods, same results... I even upgraded my system from 3.1 to 3.1.1+ before upgrading the plugins, didn't help .

Márton Bacsó If you are installing the Moodle 3.1 plugins the oidc plugin needs to be updated as well. They are available on the git repository https://github.com/Microsoft/o365-moodle

Rob The 3.1 version of the plugins have been released, they available in the local_o365 package https://moodle.org/plugins/local_o365 or the on the git repository https://github.com/Microsoft/o365-moodle