Authentication

It depends what type of LDAP server you have.

If you just want to authenticate against an LDAP server so that your users are using the same username and password, then this works well with Moodle and is documented here:

https://docs.moodle.org/33/en/LDAP_authentication

This isn't "true" SSO as the users will have to enter their username and password but it does mean they are using the same username and password for all LDAP authenticated services.

If your LDAP server is Active Directory then "true" SSO can be achieved where users only need to enter their username and password one time. This can be is documented here.

https://docs.moodle.org/33/en/NTLM_authentication

You will need to know some technical details about your LDAP server to set this up.

I have some recommendations:

1. If you set LDAP authenication up on a test Moodle site first then you can test the settings prior to implementing this on a live Moodle site.
2. Make sure your Moodle site is only accessed via HTTPS so that usernames and password are encrypted between the browser and the Moodle server.
3. Set Use TLS to Yes so that usernames and passwords are encrypted between the Moodle server and the LDAP server.

Hope this helps!