Details
-
New Feature
-
Resolution: Fixed
-
Major
-
3.0.3, 3.2
-
MOODLE_30_STABLE, MOODLE_32_STABLE
-
MOODLE_32_STABLE
-
MDL-53777-master -
Description
This feature is currently implemented in the Moodle Mobile additional features plugin.
Enabling login via the browser (or the embedded browser) makes the authentication of the user to be done via the Moodle standard log in form instead the login/token.php script.
This allow the Mobile app to work in sites using CAS, Shibboleth, LDAP SSO or any Oauth method.
The process of how it works is the following:
- When a user enters a URL, the app detects the type of login via the AJAX non-login required WS tool_mobile_get_public_config
- If the type of login is via browser, the app open a browser pointing to site/admin/tool/launch.php script - if the user is already authenticated this script will generate a token an open via Custom URL schemes the app passing that token
- If the user is not authentication, the user will be redirected to login/index.php
- Once the user is authenticated, and thanks to SESSION->wantsurl, the site/admin/tool/launch.php is launched, doing the token generation and app launch
Please, note that the current version of the mobile app only support this right now via the local_mobile plugin, once this issue is integrated we'll add support in the app. This means that you cannot use the current version of the app to check the whole process.
Attachments
Issue Links
- blocks
-
MDL-45639 Web Service for SSO (auto-login from the app to the site)
-
- Closed
-
-
MDL-55059 Support Smart App Banners for iOS
-
- Closed
-
-
MOBILE-1807 Add native SSO support for 3.2
-
- Closed
-