Breadcrumbs

External Tool (LTI 1.3)

Note: Please consider that a license is needed to use LTI 1.3. Furthermore, the new architecture is needed because of the changed authentication.

The following steps explains the general connection to the LTI v1.3 tool provider.

Get the following information from the tool provider to be given to the LMS


Parameter

Description

Example

OIDC Login initiation URL (mandatory)

The OpenID Connect URL for login initiation, provided by the Tool Provider.

https://dev-vantage-hrd.appspot.com/auth/token

Tool redirect URL (optional)

The redirect URL after successful authentication, provided by the Tool Provider.

-

LTI Organiser ID (optional)

A clear identification for this LMS.

The DNS name of the organisation is usually used. If this field is empty, the host name of the learning platform is used.

LTI 1.3 Target URL (mandatory)

The URL of the Tool Provider used to launch content.

https://dev-vantage-hrd.appspot.com/Registration.jsp

Deeplink URL (optional)

Enables importing specific launch URLs directly from the tool based on content selected by the admin.

-

Tool public key (mandatory either this or Tool JWKS URL)

  • The tool public key is provided by the LTI tool provider and must be entered in this field. The format of the key must be -----BEGIN PUBLIC KEY----- xyz -----END PUBLIC KEY-----

  • Some providers also display a Keyset URL or a Public JWK URL that looks similar to this:

  • BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD+yCFe9chDfEZpaFjGT 4u20wN1Mrgdz6NSSFpkuc5Fgf1nhT7fitJpdRyzmw/Rim8fKNGks7BY7pe/w4Med 9iVUlwjaMBw7xyK9p0Y3FqrbnH1OjKEGzEkmzvw5Z5RDVTpeJ032VBDWQ6xvsCD3 iPlnqzxzSY5GkJnvoTc7stsERpeZfVjdIbmYW+IWcFokSCkh1X7+EFv9Xha+8KZH FhZQNsBZ9/YH5t9vmQ39LSvjRvDNTny3g4jl+EH7Oh37OZd20H5GdaAQD50g8x/n F9SG7i4ybuOFfr0LgKY9U0uTlaF/jZamXnrVKCrvPF9s0W7SQb/c0W10NDfjNtXy 3wIDAQAB -----END PUBLIC KEY----- 

  • https://www.providerdomain/lti/jwks In this case, this URL can also be used INSTEAD of the public key. 

Tool JWKS URL (mandatory either this or Tool public key)

The Tool JWKS URL is provided by the LTI tool provider and must be entered in the field accordingly.

https://www.providerdomain/lti/jwks

It is only necessary to define a public key OR the Tool JWKS URL (sometimes called Keyset URL by the LTI provider). 

Information given by LMS to the LTI tool provider

Parameter

Description

Example

Client ID (mandatory, depending on the LTI provider)

ID that can be seen in the LMS consisting of a number. Visible once external service provider is created in the details field. Should be used when registering to the LTI tool.

12

Deployment ID (mandatory, depending on the LTI provider)

ID that can be seen in the LMS consisting of numbers and letters. The deployment ID is always the same.

200d101f-2c14-434a-a0f3-57c2a42369fd

Platform ID / Issuer (mandatory)

A unique identifier for the Platform, used by the Tool Provider to verify the origin of LTI messages. Must include the port :443 explicitly.

https://lms.yourcompany.com:443

Platform OIDC Auth URL (mandatory)

A unique identifier for the Platform, used by the Tool Provider to verify the origin of LTI messages. Must include the port :443 explicitly.

https://lms.yourcompany.com/ilp/lti/authorize

Platform OAuth Access Token URL (mandatory, if grading is used)

The endpoint used by the Tool Provider to request an OAuth 2.0 access token from the Platform, required for service-to-service calls.

https://lms.yourcompany.com/idm/lti/token

Platform JSON Web Key Set URL (JWKS) (mandatory)

The endpoint that publishes the Platform's public keys in JWKS format, enabling the Tool Provider to verify the cryptographic signatures of LTI messages.

https://lms.yourcompany.com/idm/.well-known/jwks.json