As admin, go to Site administration ►Mobile app ►Mobile features - Disabled features option. Check there is no section named "OAuth 2 identity providers" at the end. Go to Site administration ►Plugins ►Authentication►Manage authentication and enable "OAuth 2" by clicking the eye icon. Go to Site administration ►Server ►OAuth 2 services. Click to create a new service (any type will do: Google, Microsoft, Facebook, ...), enter any value in "Client ID" and "Client secret", make sure "Show on login page" is enabled and click Save changes. Go to Site administration ►Mobile app ►Mobile features - Disabled features option. Check there is a section named "OAuth 2 identity providers" at the end and it contains an option with the name you set to the service in the previous step. Go back to Site administration ►Server ►OAuth 2 services and create another service like you did in step 4. Go to Site administration ►Mobile app ►Mobile features - Disabled features option. Check there is a section named "OAuth 2 identity providers" at the end and it contains 3 options: the 2 services you created and an option called "All". Select the "All" option and save changes. As admin, enable "Mobile services": Plugins ► Web Services ► Mobile Create a WS Token for one user on the site: Click on Site administration ► Plugins ► Web services ► Manage tokens Open a terminal/console and execute the following command: You need to replace the wstoken with the token created in step 10 and the URL of your moodle instance curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'wsfunction=tool_mobile_get_config&wstoken=3af67232a7596ceb658df4db329e5ad6&section=mobileapp' | python -m "json.tool" Check  that in the WS response, in the tool_mobile_disabledfeatures value field, you see the following value "NoDelegate_IdentityProviders" Now, go back to Site administration ►Mobile app ►Mobile features - Disabled features option, unselect the "All" option and select any of the 2 services you created. Execute the CURL request again and check that the tool_mobile_disabledfeatures value is like "NoDelegate_IdentityProvider_1", where "1" will be the ID of the service you selected. Now, go back to Site administration ►Mobile app ►Mobile features - Disabled features option, and unselect all the options Execute the CURL request again and check that the tool_mobile_disabledfeatures value is empty