Browser and Security Settings for LTI 1.3
This article will be most useful for System Admins.
Overview
LTI 1.3 is the current generation of LTI integration; it is a secure method for integrating external tools with learning management systems and protecting users’ data. LTI 1.3 transactions require that users’ data be transmitted via third-party cookies in order for a session to be established in the external tool. If users’ browser settings do not allow the transmission of data via third-party cookies, or if their device does not allow the transmission of user data, the user will receive the error message: “Could not verify ID token: State not found” and be unable to access Concourse.
If many users at your institution experience the ID token error, you may want to consider opening Concourse in a new window. Opening Concourse in a new window prevents the ID token error from occurring regardless of users’ browser and device settings. In some LMSs, opening Concourse in a new window is part of the external tool installation process. If your institution uses Canvas, refer to these instructions for opening Concourse in a new window. If your institution prefers to open Concourse in an iframe, the guidance below can be helpful to individual users experiencing the ID token error.
Enabling Cookies
Most often, users can resolve the ID token error by enabling third-party cookies in their browser. To allow third-party cookies, first clear your browser cache and then see the directions for your selected browser:
Other Possible Resolutions
If enabling third-party cookies does not mitigate the ID token error, users can:
- Try a different browser - Firefox and Chrome tend to experience the ID token error less frequently.
- Update their browser to the latest version.
- Disable their VPN if one is in use (See instructions for disabling VPN in Chrome and Firefox).
Note that the ID token error occurs more frequently in Safari and on Apple devices due to their more restrictive security settings. If the suggestions above do not resolve the ID token error for Safari and Apple users, they can check their device security settings (refer to Apple’s Privacy Settings and Controls).
If none of these suggestions help users access their syllabi, email support@campusconcourse.com for assistance. In the meantime, instructors or administrators can share the public view of the syllabus with students as a stopgap measure until full access can be restored. To share the public view of the syllabus:
- Open the syllabus to be shared.
- Select Info.
- In the My Information block, copy the Public link.
- Share the Public link via email or post in the LMS.
Related Articles
LMS Integration (LTI 1.1)
Integration with your learning management system is accomplished through the use of the Learning Tools Interoperability (LTI) standard. This allows external systems like Concourse to easily plug into your LMS. At its core, LTI provides three ...Security Measures and Protocols
Physical security of our server clusters is the responsibility of our hosting vendors. We utilize a combination of industry leading cloud hosting by Amazon Web Services and Linode to support all of our installations and related tooling and services. ...CSRF Security Check Failure
Rarely you may see an error resulting from the CSRF security check. This happens when either (1) cookies are disabled in your browser or (2) a page - more specifically a form - is left open and the data is not submitted or saved for a long time, ...FAQs on LTI 1.3
Below, you'll find the frequently asked questions surrounding LTI 1.3. This is a running list of questions and will be updated over time as questions are received. What is Learning Tools Interoperability (LTI)? LTI is used to easily and seamlessly ...Custom Parameters for LTI 1.3
As you transition from LTI 1.1 to LTI 1.3, the process to add and manage custom parameters has changed. With LTI 1.1, Concourse administrators could select the desired user, course, and navigation settings within the LTI consumer area. With LTI 1.3, ...