Using LTI to make SSO
Using LTI to make SSO
Submitted by Anonymous (not verified) on Thu, 11-Feb-2016 06:02.
I am going to use LTI to make SSO between 2 independent organizations. Can you help me to understand the following things:
- There are Organization A and Organization B
- Org A has LTI and Org B does not have it.
- I need the users of both organizations can edit any organization with Single Sign On option
- The issue is that each user has certain roles and permissions. Is it possible that their roles and permissions are saved when they are going to other organization?
- Do you have any live example I can see the SSO via LTI development.
Thanks in advance.
Re: Using LTI to make SSO
LTI can be used as a form of SSO - but it can do more than just pass a user's identitiy. The data passed can include details about the user (e.g. name and email address), details about the context they have launched from (e.g. the ID and title of the course and link within the course used to initiate the launch) and the role(s) the user has in that context (e.g. Instructor or Learner).
You can find more resources about LTI at https://www.imsglobal.org/activity/learning-tools-interoperability. You can examine the messages underlying LTI at the http://lti.tools/test test site. Follow this link to see a list of certified LTI products. There are many example tools available; for example, the page at http://www.spvsoftwareproducts.com/php/wordpress-lti/ allows you to generate trial credentials for launching into a hosted instance of WordPress.
If you are really only interested in using LTI as an SSO mechanism, you can find a sample implementation of this at http://www.spvsoftwareproducts.com/php/sso-lti/.
Please also consider supporting the cause by becoming a member of IMS; more details can be found at https://www.imsglobal.org/imsmembership.html.
HTH.