Hi Antonio, we have encountered an issue with the SSO that seems to happen intermittently, and we think we narrow it down a bit.
Basically users login to our website's Joomla, which through Joomdle SSO will also login to Moodle. However sometimes, some users who login to Joomla found that they are not logged into Moodle.
This is what happens:
- User A login to Joomla using Browser A. On Moodle, it correctly login User A (through SSO).
- User A logged out from Joomla but did not close Browser A.
- User B login to Joomla using Browser A. On Moodle, User B is not logged in.
- However, if User B login to Joomla using Browser B, it correctly login User B (through SSO).
Looking at the Moodle mdl_sessions table, it appears that when user logs out of Joomla, the moodle session entry remains - this might be the cause of the SSO issue above?
Edit: Clearing the browser cookies seem to fix the issue (even though all the duplicate sessions remain in mdl_sessions table). So still not quite sure what is causing the problem?
Also, there seems to be 2 sessions in mdl_sessions table for the same user. One is created when the user logs into Joomla (IP address shows the server's IP), another is created when the user loads moodle (IP address shows user's IP).
Edit 2: Finally fixed the issue! Fortunately it's our own fault, we have the cookies path set differently on Joomla and Moodle hence the SSO login/logout not working properly.
