LTI 1.3 Configuration Claims, Course Placement & Privacy

[tcs1]

I have a few questions about LTI 1.3 Developer Key setup.

User Identity Claims

It seems that some of the OpenId Connect Standard Claims are not being sent in launch messages. Although these claims are not Required, the LTI Specification says that they are expected in launch messages. These include:

• given_name
• family_name
• name
• email

(See https://www.imsglobal.org/spec/lti/v1p3#user-identity-claims)

I can acquire this information using Custom Fields with variable replacements ($Person.name.given, $Person.name.family, $Person.name.full, and $Person.email.primary) but I wonder if that means they will always be sent even if Launch Privacy is set to "Private"

Launch Privacy

I can set the Launch Privacy upon initial creation of an LTI Developer Key, but if I go back to edit the key, I can no longer access this setting. Is this a known issue that will be addressed in an upcoming release?

Course Navigation "Default Show" setting

For course navigation placements we used to be able to change a "Default Show" setting, which allowed us to hide course navigation placements by default, allowing teachers to decide if they wanted to see the item in their course. Is there a way to change this either through Manual Entry or Pasted JSON? This is an important feature because our faculty don't necessarily want to see external tools that they are not using in a course.

"Can update public jwk for LTI services." setting

Is there any documentation on how this works?

[pklove]

For the identity claims, I'm getting names and email if the privacy is public.  They are not sent if the privacy is private.  I think this is as expected as this is what the privacy setting controls.  Its the same behaviour as for the Canvas LTI 1.1 launch.

For a 1.1 launch, Canvas sends the custom variables regardless of the privacy, so hopefully the same for 1.3.

Note being able to change launch privacy or the custom variables or whatever else might be particular to that screen on key creation is a real nuisance.  These should be editable after key creation.

[pklove]

BTW, you can change the privacy level and the custom variables with the API.

Not as convenient as the GUI, but workable.

[tcs1]

Thanks Peter! I do see the identity claims coming across now. I must not have chosen Public when I initially created the LTI Developer Key, so it makes sense that I would not see the identity claims.