-
Bug
-
Resolution: Fixed
-
Minor
-
4.2.1, 4.3.1, 4.4
-
MOODLE_402_STABLE, MOODLE_403_STABLE, MOODLE_404_STABLE
-
MOODLE_405_STABLE, MOODLE_500_STABLE
-
MDL-80380-405 -
MDL-80380-500 -
MDL-80380-main -
Note:
You will need to expose your site by ngrok or localtunnel
Initial setup - OAuth
- Create Microsoft Outlook account. It should be xyz@outlook.com.
- Follow OAuth 2 Microsoft service to get the Client Id and Client secret.
- Login as admin.
- Navigate to Site Administrator > Server > OAuth 2 services
- Create a new Microsoft service called: Microsoft - SMTP XOAUTH2.
- Set the Client id and Client secret.
- Set the This service will be used to SMTP with XOAUTH2 only.
- Set the SMTP email to your Microsoft Outlook account. Ex: xyz@outlook.com
- Set the Scopes included in a login request value to: "openid profile email user.read https://outlook.office.com/SMTP.Send" (Without the quote).
- Set the Scopes included in a login request for offline access value to: "openid profile email user.read offline_access https://outlook.office.com/SMTP.Send" (Without the quote).
- Save changes.
- Click Connect to a system account and finish it.
- Verify that you can connect the system account for it.
Initial setup - SMTP
- Navigate to Site Administrator > Server > Email > Outgoing Mail Configuration.
- Set the following value:
- SMTP hosts: smtp.office365.com:587
- SMTP Security: TLS
- SMTP Auth Type: XOAUTH2
- OAuth 2 Service: Microsoft - SMTP XOAUTH2
- SMTP username: Your Microsoft Outlook account. Ex: xyz@outlook.com
- No-reply address: Your Microsoft Outlook account. Ex: xyz@outlook.com
- Save changes.
Outgoing mail testing
- Navigate to Site Administrator > Server > Email > Outgoing Mail Configuration -> Test outgoing mail configuration
- To email address: Your email address to receive the test email.
- From email address: Your Microsoft Outlook account. Ex: xyz@outlook.com
- Additional subject: Test email using XOAUTH2 with Microsoft Exchange
- Press Send a test message.
- Verify that you will see: This site has successfully sent a test message to the mail server.
- Open your email inbox.
- Verify that you will see an email with:
- Title: [Your site name]: test message. Test email using XOAUTH2 with Microsoft Exchange
- Content: This is a test message to confirm that you have successfully configured your site's outgoing mail.
Note: You will need to expose your site by ngrok or localtunnel Initial setup - OAuth Create Microsoft Outlook account. It should be xyz@outlook.com. Follow OAuth 2 Microsoft service to get the Client Id and Client secret . Login as admin. Navigate to Site Administrator > Server > OAuth 2 services Create a new Microsoft service called: Microsoft - SMTP XOAUTH2 . Set the Client id and Client secret . Set the This service will be used to SMTP with XOAUTH2 only. Set the SMTP email to your Microsoft Outlook account. Ex: xyz@outlook.com Set the Scopes included in a login request value to: "openid profile email user.read https://outlook.office.com/SMTP.Send " ( Without the quote ). Set the Scopes included in a login request for offline access value to: "openid profile email user.read offline_access https://outlook.office.com/SMTP.Send " ( Without the quote ). Save changes. Click Connect to a system account and finish it. Verify that you can connect the system account for it. Initial setup - SMTP Navigate to Site Administrator > Server > Email > Outgoing Mail Configuration. Set the following value: SMTP hosts: smtp.office365.com:587 SMTP Security: TLS SMTP Auth Type: XOAUTH2 OAuth 2 Service: Microsoft - SMTP XOAUTH2 SMTP username: Your Microsoft Outlook account. Ex: xyz@outlook.com No-reply address: Your Microsoft Outlook account. Ex: xyz@outlook.com Save changes. Outgoing mail testing Navigate to Site Administrator > Server > Email > Outgoing Mail Configuration -> Test outgoing mail configuration To email address: Your email address to receive the test email. From email address: Your Microsoft Outlook account. Ex: xyz@outlook.com Additional subject: Test email using XOAUTH2 with Microsoft Exchange Press Send a test message. Verify that you will see: This site has successfully sent a test message to the mail server. Open your email inbox. Verify that you will see an email with: Title : [Your site name] : test message. Test email using XOAUTH2 with Microsoft Exchange Content : This is a test message to confirm that you have successfully configured your site's outgoing mail. -
Fails against automated checks. 
Checked
MDL-80380using repository: https://github.com/HuongNV13/moodle.git
MOODLE_405_STABLE (1 errors / 3 warnings) [branch: MDL-80380-405 | CI Job]
- MOODLE_500_STABLE (1 errors / 3 warnings) [branch: MDL-80380-500 | CI Job]
- main (1 errors / 3 warnings) [branch: MDL-80380-main | CI Job]
Built on: Wed May 21 04:18:33 UTC 2025
Fails against automated checks. Checked MDL-80380 using repository: https://github.com/HuongNV13/moodle.git MOODLE_405_STABLE (1 errors / 3 warnings) [branch: MDL-80380-405 | CI Job ] overview (0/0) , phplint (0/0) , phpcs (0/0) , js (0/0) , css (0/0) , phpdoc (0/0) , commit (1/0) , savepoint (0/0) , thirdparty (0/0) , externalbackup (0/3) , grunt (0/0) , shifter (0/0) , mustache (0/0) , gherkin (0/0) , MOODLE_500_STABLE (1 errors / 3 warnings) [branch: MDL-80380-500 | CI Job ] overview (0/0) , phplint (0/0) , phpcs (0/0) , js (0/0) , css (0/0) , phpdoc (0/0) , commit (1/0) , savepoint (0/0) , thirdparty (0/0) , externalbackup (0/3) , grunt (0/0) , shifter (0/0) , mustache (0/0) , gherkin (0/0) , main (1 errors / 3 warnings) [branch: MDL-80380-main | CI Job ] overview (0/0) , phplint (0/0) , phpcs (0/0) , js (0/0) , css (0/0) , phpdoc (0/0) , commit (1/0) , savepoint (0/0) , thirdparty (0/0) , externalbackup (0/3) , grunt (0/0) , shifter (0/0) , mustache (0/0) , gherkin (0/0) , Should these errors be fixed? Built on: Wed May 21 04:18:33 UTC 2025 -
-
6
-
Team Hedgehogs 2025 Sprint 2.2
MDL-61921 added support for XOAUTH2 for outgoing/incoming mail. However, this seems to not completely work work with O365.
Based on initial investigation we found:
We were to register a Business account of o365 and test it with Moodle.
However, we are encountering an issue with our core_oauth2 codebase. When the admin attempts to connect the Micosoft OAuth2 to a system account, we encounter a problem. Our core_oauth2 currently only supports one entry point: https://graph.microsoft.com. Unfortunately, Microsoft is using https://outlook.office.com to grant the permission for the token.
Additionally, when requesting the token and refresh-token, Outlook's entry point requires a "scope" parameter that is not needed in the Graph entry point.
This tracker is to address this issue.
