What LTI 1.3 gives you
- OIDC launch — the student clicks a Studeia activity in the host LMS and is authenticated via OpenID Connect.
- JWT/JWKS + nonce — launch tokens are validated against the platform's JWKS with nonce anti-replay.
- AGS grade passback — completed activities post grades to the host's line item (Assignment and Grade Service).
Models: LtiTool + LtiLaunch. Studeia acts as the tool provider; the host LMS (Canvas/Moodle/Blackboard) stays the source-of-truth for the gradebook.
Setup (≈15 minutes)
- In Studeia, generate the Tool URL + Client ID + JWKS under
/institution/lti-tools. - In the host LMS, add the app by Client ID and configure placements (course navigation, assignment).
- Add the Studeia tool inside a course; students launch it with their institutional SSO — no new password.
Security
LTI launches are validated against an active enrollment in the course and the lesson's expected tool binding (lesson.type === "lti_launch" and the configured toolId), with a bypass only for institutional roles or the class's teacher. The same checks apply on the mobile app.