Login into moodle with another website's google sso id_token

Viewed 54

What if a site is already logged in with google sso and has it's sso id_token and by using of that wants to login into moodle website by bypassing it's login page. Is this achievable from Oauth2? If yes then how?

If not possible then one may have to submit the moodle login form manually which may require a decrypted password stored from db and then submit the form with it.. how it can be achievable then?

1 Answers

This scenario is not possible in OpenID Connect (OIDC is the one that deals with ID tokens, not OAuth). An ID token is issued to a concrete audience (the client, or Relying Party in OIDC terms). Another client (moodle, in your case) can't use this token as it's not intended for it.

I'm not sure what you mean in the second part of your post.

Related