Names and Roles extension with LTI 1.3
LTI 1.3 was originally built in a way to allow the IMS community to continue adding new extensions which would add functionality to the core of 1.3. The Names and Roles extension was built as the next generation to the Membership Service introduced commonly found in LTI 1.0.
The LTI Names and Role Provisioning Services is an LTI specification for providing access to a list of users and their roles within the context of a course, program, or other groupings. The LTI specification enables tools to automate the pre-provisioning of student lists in the tool via APIs. User information is passed safely and in a secure manner using this service. The Names and Roles Provisioning Services also allows instructors to be provided a display within the tool showing the activity of all their learners, and whether they have accessed the tools.
In the previous LTI version (1.0), a tool could not request a full class list of users enrolled in a course.
To enable this extension for a tool, consult with your tool provider to ensure that it supports/requires this service. It is important to remember that both the platform and tool must support the same extensions for this to work. Assuming that support is not an issue, an LMS admin must register and deploy a new 1.3 learning tool. Ensure that you define the optional Keyset URL. This URL is required for the tool and platform to communicate and use the extensions. Once defined, at the registration and deployment levels ensure that you select Names and Roles Provisioning Services to enable the Names and Roles Extension. Once enabled at the tool registration level, you must also enable it at the deployment level. As above, you only need to select Names and Roles Provisioning Services in the extensions area
Alongside the new extension is a new field for security settings, which dictates if or how a tool can receive details of users not known to the deployment yet. This new security setting, set at the deployment level, is titled Classlist including users not known to this deployment. With this disabled, a tool using the Names and Roles extension only receives users that have launched that specific tool already. With this enabled, a tool is free to poll for a full classlist, regardless of whether users have already used the tool or not.
Note: If the user has never launched an LTI tool in Brightspace, the NRPS call auto-provisions the LTI UserId if this security setting is enabled. Unchecking this checkbox does not delete the user's LTI UserId.
The following Classlist user information could be shared with the tool (dependent on other Security Settings) if the tool uses the Names and Roles Service Provisioning API. This API allows the tool to pre-provision users to promote a seamless launch between Brightspace and the tool:
- Full Name
- LTI UserId
- IMS Context Roles