Anyone using i>Clicker?

[mmitchell]

Esteemed admins,

An instructor recently requested that we launch the i>Clicker LTI in our instance of Canvas.

When I contact i>Clicker support for a key and secret, they required that we download an application, run it, and provide said application with an account-level token.

I'm not comfortable providing an account-level token to too many people on campus, let alone a third party.

Am I being paranoid? Is anyone else using i>Clicker? Did you provide them with a token?

Thanks!

[muh · Accepted solution]

We have been using i>clicker for years, and the token is part of the LTI tool installation. Before issuing the token, you may want to double check with your IT security team. In our institute, all external LTI tool providers need to pass the security assessment.

Best,

Mu

[mmitchell]

We don't have a security assessment but it sounds like we should look into creating one. I'm going to assume if it passed your security assessment, it's secure and providing a token shouldn't be a problem. 

Thank you for responding. I appreciate your perspective.