OIDC endpoint, OAUTH 2.0 and Key Set URL for TEST Canvas

[WillGHampton]

My org is evaluating an LTI tool(GitHub Classroom) in our test Canvas instance hosted by Instructure. We are working with the vendor's support to identify a resolution to this issue. No progress so far, hoping the community here can help.

Unlike most other LTI tools we have installed into test, we are having difficulty with the configuration, possibly related to the OIDC Authorization endpoint, OAuth 2.0 token retrieval URL and Key Set URL

The tool's documentation says to identify your domain, which in our case has <test> added since we are using test Canvas. This gives us a canvas url /domain of https://org.test.instructure.com

• "Domain": The base URL to your Canvas instance
• "Client ID": The "Client ID" under "Details" from the developer key you created
• "OIDC Authorization end-point": The base URL to your Canvas instance with /api/lti/authorize_redirect appended at the end.
• "OAuth 2.0 Token Retrieval URL": The base URL to your Canvas instance with /login/oauth2/token appended at the end.
• "Key Set URL": The base URL to your Canvas instance with /api/lti/security/jwks appended at the end.

Will any of OIDC, OAuth or keyset use a domain of

org.instructure.com

instead of

org.test.instructure.com?

We used org.test. instructure.com for the domain base URL for OIDC, OAUTH and keyset, the tool says that the setup is incorrect.

Thanks

Will

[chriscas · Accepted solution]

Hi @WillGHampton,

You definitely want to use the domain matching the environment you're installing the tool in.  With that being said, for LTI 1.3, I don't believe you're supposed to use your instructure.com url anymore, as stated in the  Minor LTI 1.3 Changes: New OIDC Auth Endpoint, Sup... - Instructure Community - 551677  post from last year.  You'll now want to use sso.canvaslms.com, sso.beta.canvaslms.com, or sso.test.canvaslms.com respectively as your domain.  I think the instructure domain would still largely work, but if the tool is using the platform storage spec, it would definitely need the updates canvaslms.com urls.

Hope this info helps!

-Chris