Posts made by Jerry Lau

Moodle in English -> General help -> Upload file of new users and set authentication to oidc text file

by Jerry Lau -

Greetings

To add new users and to upload them into Moodle and have them use oidc, should our file be formatted like this:

username, firstname, lastname, email,..., authentication

ie.

jsmith, James, Smith, jsmith@school.com,..., oidc

epresley,Elvis, Presley,epresley@schoo.com,....,oidc

etc

Am I correct?

Average of ratings: -

Moodle in English -> Enrolment -> Clarification - User in enrolment file but not yet created or user in Moodle

by Jerry Lau -

Greetings...

In moodle 4.1, if we upload an enrolment file which contains user accounts that is not in moodle, ie. mdl_user table, would it automatically create that moodle user and authentication method is defaulted to oidc? of do we have to add the user first? or they have to login first to create that account to exist? 

I believe the previous Moodle versions automatically created the user account if it does not exist or user has not logged into Moodle at least once, correct?

We want to get rid of the "upload" new users file if it is not needed and have the enrolment upload file "add/create" the user if it does not exist if it has that feature.. 

Looking for clarification.

TIA

Average of ratings: -

Moodle in English -> Authentication -> Open ID (auth_oidc) email - Confirming Mapping of UPN (userPrincipalName) and mail in AD (Entra ID) to Moodle 4.1.7 - Not Mapping/Synching or Updating the data -> Open ID (auth_oidc) email - Confirming Mapping of UPN (userPrincipalName) and mail in AD (Entra ID) to Moodle 4.1.7 - Not Mapping/Synching or Updating the data

by Jerry Lau -
Now I unlocked it and it still does not update the email field!
unlock email field

I manually edited to a fake email of a moodle user.

That user logs into moodle and even though set as "unlocked", it did not get the "mail" from our AD/Entra ID and kept the manually incorrect email I just entered. It should just pull the "mail" when they login, right? It doesn't update it ...what the heck is going on! sad
Average of ratings: -

Moodle in English -> Authentication -> Open ID (auth_oidc) email - Confirming Mapping of UPN (userPrincipalName) and mail in AD (Entra ID) to Moodle 4.1.7 - Not Mapping/Synching or Updating the data -> Open ID (auth_oidc) email - Confirming Mapping of UPN (userPrincipalName) and mail in AD (Entra ID) to Moodle 4.1.7 - Not Mapping/Synching or Updating the data

by Jerry Lau -
I DO NOT SEE/OR HAVE auth_oidc\\task\\syncusers task listed

I ONLY see/have

Sync users from Microsoft Entra ID
\local_o365\task\usersync

How come I don't see it? 
Average of ratings: -

Moodle in English -> Authentication -> Open ID (auth_oidc) email - Confirming Mapping of UPN (userPrincipalName) and mail in AD (Entra ID) to Moodle 4.1.7 - Not Mapping/Synching or Updating the data

by Jerry Lau -

Hello there folks.

We are using Open ID Connect with Entra ID for our users.

We noticed something not working when the users try and login to Moodle, their email from AD/Entra ID's "mail" field is not updated or mapped automatically to the Data mapping (Email address): auth_oidc | field_map_email field in Moodle. It is currently set as "Email"

moodle field mapping open id


Is the value Email mapped to our AD/Entra ID's "mail" object/field as shown below?

mail AD object

Also the principal name looks like the correct format and preferred email format. Can we use that instead of mail and if so, how can we use UPN to pull it from AD to Moodle user's email field every time they log in or sync'd as a task BUT THE USER CANNOT EDIT THAT EMAIL FIELD?

UPN AD object view

We changed the email on moodle to something else and when the user logs in, it did not update it from the "mail" or "userPrincipalName" field in AD/ Entra ID as I think it should.

How can we check to make sure it pulls it from AD/Entra ID?

Can we map the userPrincipalName in our AD /Entra ID and use it  as the "Email" field in the user's profile? If so, how and when it is updated in our AD / Entra ID, it is always looking for it to update it and not the user (locked for them).

I saw this in the Authentication --> OpenID Connect --> Field mappings

I don't know what that means. Maybe a clue? some that we need to do on Entra side to pull the mail as "email" in graph?

Thank you.

 

 

Average of ratings: -