OAuth 2 authentication

New feature
in Moodle 4.5!

The OAuth 2 authentication plugin enables users to log in using their Google, Microsoft and/or Facebook account. If enabled, when a user first logs in, a new account will be created. Otherwise, they will be prompted to link it to their existing account with the same email address.

Login page with options to log in with an OAuth 2 service

Enabling OAuth 2 authentication

To use OAuth 2 authentication, an administrator must first create the required OAuth 2 services.

1. Go to 'OAuth 2 services' in Site administration > Server and click the button to create a new service.
2. Follow the instructions in OAuth 2 Google service, OAuth 2 Microsoft service or OAuth 2 Facebook service and obtain a client ID and secret.
3. Enter the client ID and secret, make sure 'Show on login page' is ticked, then save changes.

Repeat for additional services as desired.

Next:

1. Go to 'Manage authentication' in Site administration and enable the OAuth 2 authentication plugin.
2. Optional: In the OAuth 2 settings, lock selected user data fields and save changes.

Preventing new account creation

If you don't want new accounts to be created when users log in with an OAuth 2 service:

1. Go to 'Manage authentication' in Site administration and tick the box 'Prevent account creation when authenticating' (authpreventaccountcreation).
2. Click the 'Save changes' button.