Dec 032009
As promised the configuration of the Moodle-Google Integration plugin:
- Download Google-Moodle Integration plugin
- Unzip the files and upload them to your Moodle installation
- Login to your Moodle site and click Notifications to update the newly installed blocks
- From the Users menu, select Authentication then Google Authentication
- Enter your Google domain name
- On your Moodle server create the private and public keys:
Private Key (stored in Moodle only)
Command: openssl genrsa -out rsaprivkey.pem 1024(Visit Google Documentation for Key Generation Help)
Public Key (stored in Moodle and Google)
Command: openssl req -new -x509 -key rsaprivkey.pem -out rsacert.pem(Visit Google Documentation for Key Generation Help)
- Upload the created RSA Key File (rsaprivkey.pem) to Moodle (Users -> Authentication -> Google Authentication)
Upload the created SSL Signing Certificate (rsacert.pem) to Moodle (Users -> Authentication -> Google Authentication) - Login to your Google Apps Admin Control Panel (http://google.com/a/yourdomain) in a new window
- Browse to Advanced Tools – > Authentication -> Setup Single Sign-on (SSO)
- Check the Enable Single Sign-on box
- Copy and paste the Sign-in, Sign-out and Change Password page URL’s from the Setup Instructions box located on the Google Authentication setup page in Moodle
- Upload the Verification Certificate (rsacert.pem created in step 6) and Save the changes in Google Apps
- In your Google Apps Control Panel, browse to Users and Groups -> Settings and check the Enable Provisioning API box
Save the Changes
(This allows users to be updated) - Browse to Advanced Tools -> Manage OAuth Domain Key
- Upload the created certificate (rpacert.pem from step 6)
- Copy the OAuth Consumer Secret
- In Moodle, enable all Google Blocks and add them to the Front Page of your Moodle
(I had issues with a couple of the blocks and therefore only enabled the GMail Block. See how you go but if you have issues disabling the other plugins would be the first port of call) - Browse to Modules -> Blocks -> GMail Blocks and paste the Google OAuth Consumer Secret into the supplied field
Save the Changes - Select the Google User Sync block from Modules -> Blocks and fill in your Google Admin info.
Save the Changes - Test the config…
Our current configuration allows our staff and students to login to Moodle using their Active Directory credentials (via the Moodle LDAP authentication plugin) and link straight to their GMail account. This has allowed us to continue to provide a complete Single Sign-on (SSO) environment for our users.
Hi Andrew, love your blog. I think there is a new version of the plugin that you should mention (maybe link to this:http://code.google.com/p/moodle-google/downloads/list page instead of just the zip file)
Regards
Josh
Hello,
I am trying to do exactly the same thing. I have Active Directory integration working on its own, and if I disable it and enable GApps authentication, I have also been able to get it working.
However, I haven’t been able to get both to work at the same time, that is, to have Moodle act as a sort of “proxy” for Active Directory with Google Apps.
Any tips?
Hi Urko
Are you referring to the LDAP plugin when you mention Active Directory? Our authentication order (Site Administration -> Users -> Authentication -> Manage Authentication) is as per the below which may assist you:
1. Manual Accounts
2. No Login
3. LDAP Server (linked to Active Directory)
4. External Database (linked to School Admin System for non AD users)
5. Google Authentication
Then when a user logs in they simply press the GMail link and are automatically signed into their Google Account.
Let me know how you go.
Andrew Greenlees