Trying to get SSO working with SAML... or rather trying to figure out why it isn't working as advertised. We have other domains/organizations using Apps so we can't leave the SSO enabled redirecting everyone to Moodle. Since noone's in the office I just used our IP in the network mask and then Google's SSO kicks in.......but I get this error:
"Google Apps - This service cannot be accessed because your login request contained invalid recipient information. Please log in and try again.
This service cannot be accessed because your login request contained invalid recipient information. Please log in and try again.
We are unable to process your request at this time, please try again later."
We were getting this because we're trying to integrate Google Apps on an add-on domain, not the primary domain, however if we just switch to our primary domain it works, but we want it to work for the add-on domain. Still working on this. But before that here's an error I came across.
If you've got error messaging turned on (instead of logging) this might be an issue in /auth/gsaml/auth.php in the function user_authenticated_hook
add_to_log(SITEID, 'user', 'login', "view.php?id=$USER->id&course=".SITEID, $user->id, 0, $user->id);
You get an error that $USER is undefined. It's assigned on the next line. I just replaced it with this instead:
add_to_log(SITEID, 'user', 'login', 'view.php?id='.$user->id.'&course='.SITEID, $user->id, 0, $user->id);
Dunno where else to post stuff since I never put up a developer blog. I'll post back if/when I find solutions for mixing up primary/add-on domain & enabling SSO only for the web host.