LTI, cookies and Safari

Forum:

Learning Tools Interoperability Public Forum

LTI, cookies and Safari

Submitted by svickers on Thu, 16-Jun-2022 04:27.

The general solution to the cookie issue proposed a couple of years ago in the article at https://support.imsglobal.org/support/solutions/articles/48000985498-sam... is for tools to ensure that their cookies have SameSite=None and Secure settings. I have found this works well in most browsers, but the latest release(s) of Safari appear to block all third-party cookies by default. Does anyone have any advice on how to workaround/overcome this apart from asking users to turn off this setting, forcing the tool to be opened in a new window, or avoiding the use of cookies altogether? Thanks.

Solution for Cookies Needed for LTI by Schoology

For what it's worth, Schoology has a solution that they implemented found here: https://developers.schoology.com/app-platform/allowing-cookies

Submitted by David McNulty on Thu, 2022-06-16 11:35

Re: Solution for Cookies Needed for LTI by Schoology

Thanks for the reply. Do you know when this solution was written, because my testing suggests that all third-party cookies are being blocked in iframes, whether, or not, the user already has a cookie for that domain. Perhaps there has been a tightening of the security settings since this solution was devised.

Submitted by svickers on Thu, 2022-06-16 11:41

The names 1EdTech^® and IMS Global Learning Consortium^®, the 1EdTech logos, Better Learning From Better Learning Technology^®, TrustEd Apps™, 1EdTech TrustEd Apps™, Learning Tools Interoperability^®, LTI^®, IMS LTI^®, IMS Learning Tools Interoperability^®, OneRoster^®, Caliper Analytics^®, Question & Test Interoperability (QTI)^®, QTI^®, Common Cartridge^®, Competencies and Academic Standards Exchange^®, CASE^®, Competencies and Academic Standards Exchange (CASE)^®, Accessible Portable Item Protocol (APIP)^®, AccessForAll^®, Badge Connect^®, Comprehensive Learner Record Standard™, and CLR Standard™ are trademarks of 1EdTech Consortium, Inc. in the United States and/or other countries. All other trademarks and registered trademarks are the properties of their respective owners.

For information on the 1EdTech trademark usage policy, see our trademark policy page.