Configuring SAML-Based SSO with LTI 1.0

RapidIdentity Platform Documentation

Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

RapidIdentity supports Learning Tools Interoperability (LTI) Components 1.0 as an SSO protocol allowing applications that utilize this protocol to be set up within RapidIdentity.

Requirements
  • RapidIdentity administrator credentials
  • Consumer Key, Consumer Secret, and Resource Link ID provided by the connecting system
  1. Navigate to your RapidIdentity administrator portal.
  2. From the module selector, choose Applications.
  3. Select Catalog.
  4. Click Add Application.
  5. Configure the Details tab:
    1. Enter a name for your application.
    2. Choose an icon or upload an official logo.
    3. Set the Status to Active.
    4. Set the Application URL to the main URL for the integration provided by the connecting system.
  6. Configure the SSO settings:
    1. Select LTI 1.0 Authentication from the Type pop-up menu.
    2. Populate the following fields for application connectivity:
      Consumer Key
      The OAuth Key provided by the connecting system.
      Consumer Secret
      The OAuth secret provided by the connecting system.
      Resource Link ID
      An opaque identifier that the tool consumer guarantees will be unique within that consumer for every placement of the link.
      Note:

      If the tool or activity is placed multiple times in the same context, each of those placements will be distinct. This value will also change if the item is exported from one system or context. This parameter is required.

      Form Items
      Additional form items can be provided to the application. Any LDAP attribute can be used by surrounding the attribute with % signs.
  7. (Newsela) Configure the required form items for Newsela.

    If configuring LTI SSO with Newsela, set the Application URL to https://newsela.com/apps/lti-tool-provider/ and configure the following form items:

    Form NameForm Value
    tool_consumer_info_product_family_codeRapidIdentity
    lis_person_sourcedid%idautoPersonHRID% (for Staff and students)
    lis_person_contact_email_primary%mail%
    lis_person_name_family%sn%
    lis_person_name_given%givenName%
    user_id%idautoPersonHRID% (for Staff and students)
    rolesinstructor (for teachers) or learner (for students)
  8. Click Save.

The LTI 1.0 application is now configured in RapidIdentity.