OAuth2: Role Mapping from IdP to Moodle

Hello everyone,

in our organization, we try to manage the permissions of the users in all our services using a central identity provider (Keycloak).

Therefore, we would like to be able to control the system roles of our moodle users by assigning (and unassigning) matching roles in our Keycloak (i.e., perform role mapping from Keycloak to Moodle). However, to the best of our knowledge, this is currently not possible with the OAuth2 core authentication plugin (if I missed something, please provide me with a pointer).

Consequently, we created a small patch to the plugin providing the mentioned functionality. We'd like to ask whether you would be interested in adopting this patch.

(For reference: Our patch can be found here. It is currently untested, but we would be happy to work with you to bring it to a suitable state if that is desired.)