Moodle - EGroupware/egroupware GitHub Wiki

Moodle using auth_oidc plugin

Install the plugin in Moodle under Site administration > Plugins > Install plugins
Configure client credentials in EGroupware under Admin > Application > OpenID / OAuth2 server > Clients

Name: Moodle
Identifier: moodle
Secret: <long password>
Redirect URL: https://example.org/moodle/auth/oidc/
(replace https://example.org/moodle with your Moodle URL)
Allowed Grants: Authorization Code | Refresh Token
Valid Scopes: openid profile email
Status: Active

You can NOT manage it as EGroupware app, as Moodle sets X-Frame-Options of "sameorigin" and therefore disallows to be displayed in an iframe inside EGroupware, unless they run under the same domain, or that is somewhere configurable in Moodle!

Configure plugin in Moodle: Site administration > Plugins > Authentication > OpenID Connect

Provider Name: EGroupware users (or whatever you want to display on Moodle Login)
ClientID: moodle (as configured above)
Client secret: (password configured above)
Authorization Endpoint: https://example.org/egroupware/openid/endpoint.php/authorize
(replace example.org with the full qualified domain-name of your EGroupware installation)
Token Endpoint: https://example.org/egroupware/openid/endpoint.php/access_token
Resource: https://example.org/moodle/ (does not matter, but gives error in Moodle if left empty)
Scope: openid profile email (as configured above)
Redirect URI: https://example.org/moodle/auth/oidc/
(replace https://example.org/moodle with your Moodle URL)
Force redirect: <check if only EGroupware/OpenID Connect is used, leave unchecked to display just an option on Moodle login page>
Auto-Append: <can be left empty, allows to customize username from EGroupware>
Domain-Hint: <leave empty / not used in EGroupware>
Authentication Method: Authorization Code Flow (recommended)
(If you configure "Resource Owner Password Credentials Grant", you have to allow this grant in EGroupware too!)
User Restrictions: <can be left empty>
Record debug messages: <can be checked/enabled for troubleshooting>
Icon: <upload EGroupware icon, eg: https://raw.githubusercontent.com/EGroupware/egroupware/master/api/templates/default/images/logo64x64.png