diff --git a/Moodle.md b/Moodle.md
new file mode 100644
index 0000000..ce3d0f6
--- /dev/null
+++ b/Moodle.md
@@ -0,0 +1,44 @@
+### Moodle using [auth_oidc](https://moodle.org/plugins/auth_oidc) plugin
+
+* Install the plugin in Moodle under Site administration > Plugins > Install plugins
+* Configure client credentials in EGroupware under Admin > Application > OpenID / OAuth2 server > Clients
+```
+Name: Moodle
+Identifier: moodle
+Secret: <long password>
+Redirect URL: https://example.org/moodle/auth/oidc/
+(replace https://example.org/moodle with your Moodle URL)
+Allowed Grants: Authorization Code | Refresh Token
+Valid Scopes: openid profile email
+Status: Active
+```
+Optionally you can manage it as EGroupware app (display it in EGroupware and limit authentication to selected users and groups only)
+```
+Application name: Moodle
+Start Address (URL): https://example.org/moodle/
+Allowed for: <select users and groups which should have access to Moodle>
+Icon: <upload a Moodle icon to display in EGroupware>
+```
+* Configure plugin in Moodle: Site administration > Plugins > Authentication > OpenID Connect
+```
+Provider Name: EGroupware users (or whatever you want to display on Moodle Login)
+ClientID: moodle (as configured above)
+Client secret: (password configured above)
+Authorization Endpoint: https://example.org/egroupware/openid/endpoint.php/authorize
+(replace example.org with the full qualified domain-name of your EGroupware installation)
+Token Endpoint: https://example.org/egroupware/openid/endpoint.php/access_token
+Resource: https://example.org/moodle/ (does not matter, but gives error in Moodle if left empty)
+Scope: openid profile email (as configured above)
+Redirect URI: https://example.org/moodle/auth/oidc/
+(replace https://example.org/moodle with your Moodle URL)
+Force redirect: <check if only EGroupware/OpenID Connect is used, leave unchecked to display just an option on Moodle login page>
+Auto-Append: <can be left empty, allows to customize username from EGroupware>
+Domain-Hint: <leave empty / not used in EGroupware>
+Authentication Method: Authorization Code Flow (recommended)
+(If you configure "Resource Owner Password Credentials Grant", you have to allow this grant in EGroupware too!)
+User Restrictions: <can be left empty>
+Record debug messages: <can be checked/enabled for troubleshooting>
+Icon: <upload EGroupware icon, eg: https://raw.githubusercontent.com/EGroupware/egroupware/master/api/templates/default/images/logo64x64.png
+```
+
+