Canvas Self-Hosted - Office 365 LTI Authentication Issues

[kgrizzell]

We're using the Bitnami Canvas VM and all is working well, except the Office 365 LTI integration.  Whenever we try to authenticate, we receive a 401 unauthorized error.  The redirect URI is accessible publicly and I can authenticate using Azure AD, just not when trying to authenticate through the LTI.  Anyone else self-hosting and have this worked out?  Here's some header info:

Response Headers:

Cache-Control	no-cache
Connection	Keep-Alive
Content-Type	application/json; charset=utf-8
Date	Mon, 04 May 2020 17:37:03 GMT
Keep-Alive	timeout=5, max=67
Server	Apache
Status	401 Unauthorized
Transfer-Encoding	chunked
Vary	Cookie
WWW-Authenticate	Canvas OAuth 2.0
X-Canvas-Meta	b=1130204;m=1130204;u=0.07;y=0.00;d=0.01;
X-Canvas-User-Id	10000000000001
X-Content-Type-Options	nosniff
X-Download-Options	noopen
X-Frame-Options	SAMEORIGIN
X-Permitted-Cross-Domain-Policies	none
X-Powered-By	Phusion Passenger 5.3.7
X-Rate-Limit-Remaining	600.0
X-Request-Context-Id	d25f588d-70bb-41ed-83af-7395b6163095
X-Request-Cost	0.07612161699973541
X-Runtime	0.083305
X-Session-Id	cfc6a423d0a0e2945b83a0f61aa278c7
X-XSS-Protection	1; mode=block

Request Headers

Accept	text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Encoding	gzip, deflate, br
Accept-Language	en-US,en;q=0.5
Connection	keep-alive
DNT	1
Host	canvas.artacademy.edu
Referer	https://office365-iad-prod.instructure.com/
Upgrade-Insecure-Requests	1
User-Agent	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0

[robotcars]

Hi  @kgrizzell 

Not much open source canvas‌ support here. But if you jump on to the Mailing List or the IRC Channel, someone has probably dealt with this and knows how to offer suggestions.

Canvas Dev & Friends - Instructure Tech Blog