http://www.imsglobal.org/community/forum/index.cfm?forumid=11 FuseTalk Standard Edition http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1349 2013-05-16T18:09:04 -05.00 pgogy 1
Trying to find out some more information about LTI

I have the SVN from Google, and have it set up in a folder and have got Moodle to talk to it fine.

Looking at the apps at edu-apps.org site, some of those apps return a URL to the LMS / VLE.

I'd like to set up a few apps to do this - but I can't seem to find out what this process is called, or how to code this - I can't find anywhere obvious in the PHP it happens.

https://www.edu-apps.org/extensions/result_data.html

suggests a block of XML is return, but watching the youtube in console I can't see any transfers back to the LMS?

All pointers welcome.

Thanks

Pat]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1341 2013-05-08T08:46:16 -05.00 thirilog 1
I'm thinking to have an open source LMS to import LTI 1.1 enable IMS Common cartridges, can I get this done with Moodle or any other LMS? If Moodle deals this below are few queries I would like to get clarified:
1. Which version of Moodle can help in my requirement?
2. Do I need to enable any LTI based controls/plug-in to get this imported?

Thanks in Advance]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1317 2013-04-25T14:31:01 -05.00 KennethRamirez 2
select * from courses where container_id = '82427bcf-6033-4e78-8efa-05c4566e750f'

I don't know of a way in ANGEL you can pull that without going into the db. I checked the list of published replacement tokens and it wasn't in there. You may want to open a ticket with BB support and ask how can you pull the id.

I did just add another topic asking about a courses extension to pull the context_id's in the same way as the memberships service.

Thanks,
-Andy]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1320 2013-04-25T14:15:00 -05.00 AFisher 1
If there is not. How do you go about using a standard method? Should we implement a LIS method in the LMS that returns the information?

Thanks,
-Andy]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1317 2013-04-23T12:15:36 -05.00 KennethRamirez 2 http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1314 2013-04-22T20:19:59 -05.00 kreut 1
I just finished developing an app that I'd like to be able to integrate with Canvas, specifically so that when a user logs into Canvas, they can then click on my "external tool" and be logged into my site. I know that this is a super noob question, but after looking through the Canvas guide, it looks like I need a consumer key and a shared secret key to get the ball rolling. Then, I'm guessing that I use "LTI" to tie things together. If anybody could help me in these first steps, I'd really appreciate it.

Thank you,

Eric]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1313 2013-04-22T18:17:48 -05.00 MRyno 1 http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=981 2013-04-19T17:44:46 -05.00 StephenVickers 10 Ignoring this last post (which I see is a duplicate of an earlier one by Jeff Kahn), I thought I would make people aware (in case you haven't seen it yet) that the Canvas LMS is apparently using an 'LTI extension' which seems to be pretty much identical to what I was proposing in this thread. Some of their example apps - e.g. the Google Art Project app- consist in simple 'LTI providers' -especially those which let you access public resources-, that offer user friendly integration with an LMS that supports this special 'LTI extension' (the extension essentially let's you choose a specidic provider's resource -by introducing a provider's resource picker- as you are still filling in the 'link creation' form within the LMS). Again, I think the advantage of having this feature as part of the LTI spec itself, is that tool providers can be as 'dumb' as they want - in the sense that they may not keep track of which links are being created in which LMS's, do anything with this knowledge, or even initiate the link creation process-, but still provide a nice integration with an LMS as long as they offer a 'resource picker'.]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1302 2013-04-19T13:46:37 -05.00 annalisa 3 http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1309 2013-04-18T18:51:15 -05.00 StephenVickers 1

• http://phpsecurity.readthedocs.org
• https://www.owasp.org
  

I am sure there are many others - please post a reply with any you recommend.

I would also like to take this opportunity to note that any data passed in an LTI launch request should be encoded using UTF-8 (as required by OAuth). This is not clearly identified in the LTI specification, but we propose to rectify this in the future. I am not aware of any issues arising from this, so assume that everyone is already using UTF-8 anyway!]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1188 2013-04-18T18:36:08 -05.00 jcullison 2 http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1224 2013-04-18T18:30:21 -05.00 ProductsTeam 2 http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1243 2013-04-18T18:20:41 -05.00 sophie,schnabl 2
OAuthMessage oAuthMessage = new OAuthMessage("POST", launchUrl, parameters);
OAuthConsumer oAuthConsumer = new OAuthConsumer("about:blank", consumerKey, secret, null);
OAuthAccessor oAuthAccessor = new OAuthAccessor(oAuthConsumer);
oAuthMessage.addRequiredParameters(oAuthAccessor);
allParameters = oAuthMessage.getParameters();

A tool provider would verify the authenticity of a signed launch request using code such as:

OAuthConsumer oAuthConsumer = new OAuthConsumer("about:blank", consumerKey, secret, null);
OAuthAccessor oAuthAccessor = new OAuthAccessor(oAuthConsumer);
OAuthValidator oAuthValidator = new SimpleOAuthValidator();
OAuthMessage oAuthMessage = OAuthServlet.getMessage(request, null);
oAuthValidator.validateMessage(oAuthMessage, oAuthAccessor);

Hope that helps.]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1302 2013-04-18T18:08:40 -05.00 annalisa 3
In LTI 1 the only requests which might be received by a tool consumer are when a tool provider uses the Outcomes service; these requests (and the responses) are sent in XML (the format is given in the spec).]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1302 2013-04-12T21:40:05 -05.00 annalisa 3 documents and guides as I can find, but a couple basics are slipping past me. They are probably blaringly obvious, so I apologize for going so low level:

With regards to the resource_link_id - is that meant to be generated by the provider or the consumer?

Our current system sends back JSON encoded data, and I'm thinking that may need to be tweaked, but can't quite comprehend into what - what format does a consumer expect to be receiving?

I think that's it for now.

Thanks.]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1270 2013-03-27T06:18:43 -05.00 rajiff 2
See all certifications and feature explanations of different versions:

http://www.imsglobal.org/cc/statuschart.cfm

http://www.imsglobal.org/LTI/p...onLTIConformance.html

As well as the CC/LTI Alliance forums (requires CC/LTI Alliance membership or above):

http://www.imsglobal.org/devel.../alliance/welcome.cfm

To get listed on the LTI catalog page a product must first be certified and join the developer's community for ongoing commitment to resolve any issues that may occur:

http://developers.imsglobal.org/catalog.html

Public draft of LTI v2:

http://www.imsglobal.org/lti/index.html]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1270 2013-03-26T08:36:14 -05.00 rajiff 2
if they both are same, why refer to it as Basic LTI and not LTI

Why IMS does not gives more information about BLTI? what are the pros & cons of BLTI]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1243 2013-03-01T03:41:13 -05.00 sophie,schnabl 2
From my understanding Oauth is designed to have a certain structure.
From the Consumer side (Oauth 1.0)
(1) First you request a Request token
(2) Then you forward the user to an authentication/grant permission site
(3) Then you exchange your received token for an access token
(4) Then you access the desired resource

In special circumstances you can skip steps 2 and 3 (2 legged Oauth), but you still request a token and then in a separate call access the desired resource, attaching the received request token.

Am I correct in understanding that the flow suggested by BLTI does none of this, it just sends one single request and it doesn't attach any tokens? (I read the reference cited that tokens are not required in the oauth defintion, but my understanding of the Oauth specification was that you only don't need a token if you have done the other preceeding steps described, while blti oauth seems to be designed to be one step only, even specifically advising implementers to fill the callback with about:blank and generally seems to assume/encourage that this step should lead to direct access/autologin)

Basically if this is all of oauth the only thing blti takes of it is step C
http://oauth.net/core/diagram.png

[at least it seems to me that the BLTI Definition references C "there is no need for an oauth_token as per OAuth 1.0 documentation section 6.2.3. " http://www.imsglobal.org/lti/b...p0/ltiBLTIimgv1p0.html
http://oauth.net/core/1.0/#auth_step2
The parameters themselves though look to me more like the ones passed along in step A]

This is not a criticism, I was just having a lot of problems trying to fit BLTI into a structured oauth setup (including the usage of programming libraries that supply full implementations of oauth). Am I correct in just abandoning that/assuming that BLTI really just uses the names of certain oauth parameters and some of their tools such as signatures and nounces, but otherwise has very little to do with actual structured oauth or is there anything I missed in the specification about a longer, more structured interaction flow/what I can expect the Consumer to have implemented if its following blti?]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1225 2013-02-21T10:29:21 -05.00 ProductsTeam 3
Thanks for the reply and the information provided .
This may be silly question to ask, but please understand that we are very new to this thing. Can you please let me know

What exactly do you mean by an LTI instance?

All we have is an implementation of basic LTI Launch, tried it on your sample tool
http://dr-chuck.com/ims/php-simple/tool.php it perfectly establishes context with our details. Is this what you mean by an LTI instance?

Thanks&Regards
Kranthi Renamala]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1225 2013-02-20T18:45:56 -05.00 ProductsTeam 3 1. follow the "Consumer Setup" from the lmsdetail.php page you cited;
2. complete the details of your consumer;
3. click the "Set data in session" button;
4. in a separate window, set up an LTI link in your tool consumer using the details provided;
5. follow the "Test Status" link in the first window and perform launches to the tool to satisfy the different tests listed on this page; refresh the page until all the tests are passed (green or blue)

You should add an instance of LTI usng the functionality provided within your tool consumer being tested; there should not be any need for and sample Java code if you are already at the stage of testing your software for conformance.

Note that if you are only looking for LTI 1.0 conformance (i.e. you do not support the Outcomes service) then your starting point is at: http://www.imsglobal.org/devel...blti-cert/lmscert.cfm

Let me know if this does not resolve your issues.]]> http://www.imsglobal.org/community/forum/messageview.cfm?catid=44&threadid=1225 2013-02-20T02:26:28 -05.00 ProductsTeam 3