AnsweredAssumed Answered

OAuth2 and LTI

Question asked by Zbynek Dusatko on Apr 12, 2018
Latest reply on Apr 25, 2018 by Angus Grieve-Smith

Hello all,

I am building LTI tool which will use user access token to access the course info. I finally got LTI launch and oauth2 access token working. Now I am confused why I need two pairs of ids and secrets:
1. LTI Consumer Key, LTI Shared Secret (this is for LTI launch and it is set when registering the tool)

2. Client ID, Client Token (this is to get access token through oauth2, this is set separately in Canvas developer keys section).

I thought that the idea of using oauth2 after LTI is successfully launched was that I don't need any developer keys set beforehand manually.

Or is there some common rule to set them the same
LTI Consumer Key = Client ID
LTI Shared Secret = Client Token ?