Moodle plugins directory: OpenID Connect | Moodle.org
OpenID Connect
OpenID Connect Authentication Plugin
The OpenID Connect plugin provides single-sign-on functionality using configurable identity providers, including Azure Active Directory. It is used as part of the Microsoft 365 suite of plugins to connect to Azure Active Directory, but can be configured to provide SSO integration between Moodle and other OpenID Connect providers as well.
This is part of the suite of Microsoft 365 plugins for Moodle.
To follow active development on GitHub, or to find historical versions, click here.
The supported Moodle versions of this plugin is in line with core Moodle version support.
Questions and issue reporting
Github should be used for reporting issues found when configuring or using the plugin, and to ask questions. The comments area on this page is not actively monitored.Contributing
Before we can accept your pull request, you'll need to electronically complete Microsoft's Contributor License Agreement. If you've done this for other Microsoft projects, then you're already covered.
Why a CLA? (from the FSF)
Copyright
(c) Microsoft, Inc.
Code for this plugin is licensed under the GPLv3 license.
Any Microsoft trademarks and logos included in these plugins are property of Microsoft and should not be reused, redistributed, modified, repurposed, or otherwise altered or used outside of this plugin.
Useful links
Screenshots
In my organization after an update of our Moodle Arquitecture (using AWS escalabilty), sometimes users get the following error, anyone has an idea how to trobleshoot it??
The arquitecture use: Redis , EFS, 2 moodle instances, AWS Loadbalances, and Gluster FS
Error Code: erroroidccall
stacktrace Image: https://ibb.co/VjZ0nrL
Error in OpenID Connect: AADSTS9002313: Invalid request. Request is malformed or invalid
When going into the Health Check it suggest that the System API User :Moodle does not have a token to communicate with Office 365 as the system API user. This can usually be resolved by resetting the system API user.
This has a fix it link. When we click the link it asks us to sign in with the API user and grant a load of permissions, then ends up back at the same page with the AADSTS9002313 error.
Any thoughts of what is causing this?
My users are getting the following error message when they try to single sign on into moodle through office.com:
Error in OpenID Connect: AADSTS9002313: Invalid request. Request is malformed or invalid.
!!! Exception - Argument 3 passed to mysqli_native_moodle_database::delete_records_select() must be of the type array or null, int given, called in [dirroot]/auth/oidc/classes/task/cleanup_oidc_state_and_token.php on line 47 !!!
The only way to have all other scheduled tasks to run is to disable this task. We have this version of auth_oidc installed on two sites and they both produce this error.
Moodle versions are: 3.9.3 and 3.9.1
probably there is a bug in latest 3.9.8 version. The tablefield resource was not renamed to tokenresource during upgrade process. The part in upgrade.php is maybe the $result:
if ($result && $oldversion < 2020071504) {
...
I have made an emergency release of auth_oidc for Moodle 3.9 which contains a fix to the issue. Details are added in the github issue https://github.com/microsoft/o365-moodle/issues/1901. The release is at https://moodle.org/plugins/auth_oidc/3.9.8/25633.
Regards,
Lai
Thank you for the hint to raise issues and thank you for the fast fix.
Regards,
Daniel
Regards,
Lai