Moodle + Office 365: Better together


Setting up and configuring the Office 365 services on Moodle



Download 345.09 Kb.
Page11/13
Date29.07.2017
Size345.09 Kb.
#24227
1   ...   5   6   7   8   9   10   11   12   13

Setting up and configuring the Office 365 services on Moodle


The Office 365 services complete the Moodle learning platform by increasing the productivity of students and teachers.

The set of Office 365 integration plugins completely enables an integration path with Word Online, OneDrive for Business, OneNote and the Outlook calendar, as we have already mentioned.

This section discusses their implementation in our test lab environment.

Note For more information, see the corresponding Moodle documentation51.

48.Configuring the plugins


The first step consists in activating and configuring the OpenID Connect authentication plugin that allows for single sign-on between the Office 365 platform and Moodle.

Log onto Moodle as the platform administrator, and proceed with the following steps.



  1. Go to Site administrationPluginsAuthentication.

  2. Click Manage authentication.

  3. Locate the OpenID Connect authentication plugin and click on the "eye" to activate it.



  1. Click on Settings. The OpenID Connect page opens.



  1. Complete the fields:

    1. In Provider Name, enter a name that can be used to select an authentication provider. This is usually the name of the organization. For example in our illustration, enter "Contoso123”.

    2. In Auth Endpoint, enter "https://login.windows.net/common/oauth2/authorize".

    3. In Token Endpoint, enter "https://login.windows.net/common/oauth2/token".

    4. In Redirect URI, enter the address of your Moodle site followed by /auth/oidc, for example in our illustration "https://o2m.contoso123.fr/auth/oidc/".

  2. Click Save changes.

  3. Leave the OpenID Connect page open. We will return to it later.

49.Configuring the Office 365 single sign-on


To enable Moodle to authenticate Office 365 identities, you have to configure the Azure AD directory used by your Office 365 subscription so that it authorizes your Moodle application to use the identities declared in it.

The Azure management portal allows you to manage your Azure Active Directory. To begin with, we are going to link the Azure AD directory used by the Office 365 tenant with the Azure subscription that contains the Moodle environment. This will enable you to manage all the Azure resources from a single portal.

Proceed with the following steps:


  1. In a new tab in the browser, navigate to the Microsoft Azure management portal at https://manage.windowsazure.com and sign-in.

  2. Click "+" and select: APPLICATION SERVICES ACTIVE DIRECTORY DIRECTORY CUSTOM CREATE

The Add directory dialog opens up.





  1. Select Use existing directory.



  1. Check I am ready to log off.

  2. Authenticate yourself with an Office 365 account.



  1. Click Continue.



  1. Log off, then log on again with your Azure account.

50.Registering an application in the Azure portal


The next step in the configuration of single sign-on (SSO) between Moodle and Office 365 consists in registering the Moodle application in the Azure AD directory, so that it can be granted certain privileges.

To register the Moodle application, proceed with the following steps:



  1. If you are not already logged onto the Microsoft Azure portal, log on at https://manage.windowsazure.com.

  2. Select ACTIVE DIRECTORY on the left pane and select your Azure AD directory.

  3. In the top menu, click APPLICATIONS. If no applications have been installed yet, this page only displays the Add an application link. Click this link or ADD at the bottom of the tray.

The What do you want to do? dialog box opens.





  1. Click Add an application my organization is developing.



  1. On the Tell us about your application page, specify a name for your application, for example “O2m.Contoso123” in our illustration. Leave WEB APPLICATION WEB AND/OR WEB API selected for the type, and then click the arrow icon in the bottom right.



  1. On the App properties page, specify:

    1. In SIGN-ON URL the redirection address of your Moodle instance previously configured for the OpenID Connect protocol, for example “https://o2m.contoso123.fr/auth/oidc/” in our illustration.

    2. In APP ID URI the main address of your Moodle instance, for example “https://o2m.contoso123.fr” in our illustration.

  2. Click the check mark icon in the bottom right, and then click OK.

51.Configuring the application that provides identities to Moodle


Once the application has been added, you simply need to perform a few configuration steps to allow Moodle to use the Azure AD/Office 365 identities.

Proceed with the following steps:



  1. In the Microsoft Azure management portal, select the Moodle application that you have just created.



  1. Click CONFIGURE and scroll down to Client ID.



  1. Copy the value of the field. You will need it to finalize the configuration of the OpenID Connect plugin in Moodle. This will correspond to an eponym field.

  2. Scroll down to keys.

  3. In Keys, select 1 year for the duration.



  1. A new key is created.

Click SAVE at the bottom of the tray to save the newly created key.





  1. Copy the value of the key. You will need it to finalize the configuration of the OpenID Connect plugin in Moodle. This will correspond to a Client Secret field.

  1. Back in the OpenID Connect configuration page of your Moodle instance, copy the above values to the related target Client ID and Client Secret fields.



  1. Click Save changes.

  2. Back in the Microsoft Azure management portal, in the above Moodle configuration page, scroll down to permissions to other applications.



  1. Click Add application. A Permissions to other applications opens up.



  1. Click the "+" on the right of both Office 365 Exchange Online and Office 365 SharePoint Online.

  2. Click the check mark icon at the bottom right to close the dialog.



  1. Click Delegated Permissions next to Office 365 Exchange Online, and then select:

    1. Read and write users calendars

    2. Read users calendars



  1. Likewise, click Delegated Permissions next to Office 365 SharePoint Online, and then select:

  1. Read and write user files

  2. Read user files

  3. Have full control of all site collections

  4. Read and write items and lists in all sites collections

  5. Read and write items in all site collections

  6. Read items in all site collections



  1. Click Application Permissions next to Windows Azure Active Directory, and then select:

  1. Read directory data



  1. Finally, click Delegated Permissions next to Windows Azure Active Directory, and then select:

  1. Read directory data

  2. Enable sign-on and read users’ profiles

  3. Access your organization’s directory



  1. Click SAVE at the bottom of the tray.


52.Adding a user to the application


Once the Moodle application has been configured in Azure AD, you must then assign users to it so that Azure AD can allow them an access.

Proceed with the following steps:



  1. Still in the Moodle application page in the Azure management portal, click USERS.



  1. In USERS, select the Office 365 user(s) who should be able to access this application, namely in our illustration, the test users Teacher Martin, Student 1, Student 2 and Student 3 created earlier in this document, see section § Creating the test users.

  2. Click ASSIGN at the bottom of the tray.



  1. Click YES to confirm.




Download 345.09 Kb.

Share with your friends:
1   ...   5   6   7   8   9   10   11   12   13



The database is protected by copyright ©ininet.org 2024
send message
    Main page
different types
latest version
latest information
same features
ongoing costs