Created Moodle (markdown)

Ralf Becker 2020-05-22 11:35:16 +02:00
parent 7d702b54ac
commit f3d39d966e

44
Moodle.md Normal file

@ -0,0 +1,44 @@
### Moodle using [auth_oidc](https://moodle.org/plugins/auth_oidc) plugin
* Install the plugin in Moodle under Site administration > Plugins > Install plugins
* Configure client credentials in EGroupware under Admin > Application > OpenID / OAuth2 server > Clients
```
Name: Moodle
Identifier: moodle
Secret: <long password>
Redirect URL: https://example.org/moodle/auth/oidc/
(replace https://example.org/moodle with your Moodle URL)
Allowed Grants: Authorization Code | Refresh Token
Valid Scopes: openid profile email
Status: Active
```
Optionally you can manage it as EGroupware app (display it in EGroupware and limit authentication to selected users and groups only)
```
Application name: Moodle
Start Address (URL): https://example.org/moodle/
Allowed for: <select users and groups which should have access to Moodle>
Icon: <upload a Moodle icon to display in EGroupware>
```
* Configure plugin in Moodle: Site administration > Plugins > Authentication > OpenID Connect
```
Provider Name: EGroupware users (or whatever you want to display on Moodle Login)
ClientID: moodle (as configured above)
Client secret: (password configured above)
Authorization Endpoint: https://example.org/egroupware/openid/endpoint.php/authorize
(replace example.org with the full qualified domain-name of your EGroupware installation)
Token Endpoint: https://example.org/egroupware/openid/endpoint.php/access_token
Resource: https://example.org/moodle/ (does not matter, but gives error in Moodle if left empty)
Scope: openid profile email (as configured above)
Redirect URI: https://example.org/moodle/auth/oidc/
(replace https://example.org/moodle with your Moodle URL)
Force redirect: <check if only EGroupware/OpenID Connect is used, leave unchecked to display just an option on Moodle login page>
Auto-Append: <can be left empty, allows to customize username from EGroupware>
Domain-Hint: <leave empty / not used in EGroupware>
Authentication Method: Authorization Code Flow (recommended)
(If you configure "Resource Owner Password Credentials Grant", you have to allow this grant in EGroupware too!)
User Restrictions: <can be left empty>
Record debug messages: <can be checked/enabled for troubleshooting>
Icon: <upload EGroupware icon, eg: https://raw.githubusercontent.com/EGroupware/egroupware/master/api/templates/default/images/logo64x64.png
```