Moodle

Moodle using auth_oidc plugin

• Install the plugin in Moodle under Site administration > Plugins > Install plugins
• Configure client credentials in EGroupware under Admin > Application > OpenID / OAuth2 server > Clients

Name: Moodle
Identifier: moodle
Secret: <long password>
Redirect URL: https://example.org/moodle/auth/oidc/
(replace https://example.org/moodle with your Moodle URL)
Allowed Grants: Authorization Code | Refresh Token
Valid Scopes: openid profile email
Status: Active

You can NOT manage it as EGroupware app, as Moodle sets X-Frame-Options of "sameorigin" and therefore disallows to be displayed in an iframe inside EGroupware, unless they run under the same domain, or that is somewhere configurable in Moodle!

• Configure plugin in Moodle: Site administration > Plugins > Authentication > OpenID Connect

Provider Name: EGroupware users (or whatever you want to display on Moodle Login)
ClientID: moodle (as configured above)
Client secret: (password configured above)
Authorization Endpoint: https://example.org/egroupware/openid/endpoint.php/authorize
(replace example.org with the full qualified domain-name of your EGroupware installation)
Token Endpoint: https://example.org/egroupware/openid/endpoint.php/access_token
Resource: https://example.org/moodle/ (does not matter, but gives error in Moodle if left empty)
Scope: openid profile email (as configured above)
Redirect URI: https://example.org/moodle/auth/oidc/
(replace https://example.org/moodle with your Moodle URL)
Force redirect: <check if only EGroupware/OpenID Connect is used, leave unchecked to display just an option on Moodle login page>
Auto-Append: <can be left empty, allows to customize username from EGroupware>
Domain-Hint: <leave empty / not used in EGroupware>
Authentication Method: Authorization Code Flow (recommended)
(If you configure "Resource Owner Password Credentials Grant", you have to allow this grant in EGroupware too!)
User Restrictions: <can be left empty>
Record debug messages: <can be checked/enabled for troubleshooting>
Icon: <upload EGroupware icon, eg: https://raw.githubusercontent.com/EGroupware/egroupware/master/api/templates/default/images/logo64x64.png