For Admins

This article is a values reference for organization admins setting up a Learning Tools Interoperability (LTI) 1.3 integration between Vocareum and a Learning Management System (LMS). It supplies the URLs and field values needed during setup; the per-LMS setup how-tos walk through where to enter them. For background on what LTI 1.3 enables and how the integration works overall, refer to What Is LTI 1.3 Integration with Vocareum?.

Vocareum configuration URLs

The URLs below are the values that Vocareum exposes to the LMS during tool registration. If your LMS supports configuration by URL, the single Configuration URL pre-populates every field. If the LMS requires manual entry, enter the three manual URLs in their corresponding fields.

Field	Value	When to use
Configuration URL (automatic setup)	`https://labs.vocareum.com/lti1.3/config.json`	When the LMS supports configuration by URL (JSON import). Auto-populates the manual fields below.
OpenID Connect Initiation URL	`https://labs.vocareum.com/lti/oidc_login.php`	Manual setup only.
Redirect URL or Target Link URI	`https://labs.vocareum.com/lti/launch.php`	Manual setup only.
Public JWK URL or KeySet URL	`https://labs.vocareum.com/lti1.3/jwks.json`	Manual setup only.

Vocareum issuer form fields

The Vocareum New Issuer form (under Edit Org → Authentication → LTI 1.3 → Issuers → New Issuer) collects identifying information about the LMS so Vocareum can verify and respond to LTI launches from it. The table below defines what each field expects; the next section lists the actual values for each major LMS. For the step-by-step procedure of filling out this form, refer to Registering an LTI 1.3 Issuer and Deployment in Vocareum.

Field	What to enter	Notes
Issuer	The LMS platform's issuer URL, which uniquely identifies the LMS instance.	Often a fixed value for the LMS vendor (for example, `https://canvas.instructure.com` for Canvas) rather than your institution's host. Do not include a trailing slash.
Client ID	The Client ID generated by the LMS when Vocareum is registered as an external tool.	Copy this value exactly from the LMS tool registration. Even a leading or trailing space causes the launch to fail.
Platform KeySet URL	The LMS's JWK Set URL, where the LMS publishes the public keys Vocareum uses to verify incoming launches.	Sometimes labeled in the LMS as JWK Set URL or Public JWK URL.
OIDC Authentication URL	The LMS's OpenID Connect authentication endpoint, where Vocareum initiates each launch handshake.	Sometimes labeled in the LMS as OpenID Connect Login URL or Authorization URL. Do not include a trailing slash.
OAuth Token URL	The LMS's OAuth 2.0 access-token endpoint, which Vocareum calls to obtain bearer tokens for grade passback and other server-to-server services.	Sometimes labeled in the LMS as Access Token URL. Do not include a trailing slash.
OAuth Server URL	The OAuth audience or server URL, when the LMS requires one.	Leave blank for LMSs that do not require it, such as Canvas. Required for Brightspace (D2L).
Name/Identifier	A descriptive label of your choice for this issuer entry.	Internal label only, used to identify the entry in Vocareum's issuer list. For example, `Institution LMS - Canvas` or `Production Brightspace`.

Platform-specific values

The sub-sections below list the actual values to enter into the Vocareum issuer form for each major LMS. Replace bracketed placeholders such as [your-domain] with your institution's LMS host.

Canvas

The Canvas issuer value is fixed for all Canvas-hosted institutions. The KeySet URL is also fixed; the OIDC Authentication URL and OAuth Token URL are institution-specific.

Field	Value or pattern
Issuer	`https://canvas.instructure.com`
Platform KeySet URL	`https://canvas.instructure.com/api/lti/security/jwks`
OIDC Authentication URL	`https://[your-domain].instructure.com/api/lti/authorize_redirect`
OAuth Token URL	`https://[your-domain].instructure.com/login/oauth2/token`
OAuth Server URL	Leave blank.

For the full Canvas setup walkthrough, refer to Setting Up LTI 1.3 for Canvas.

Brightspace (D2L)

Brightspace generates the values below in the tool registration details box after you register Vocareum as an LTI 1.3 tool. Copy each value directly from that box into the corresponding Vocareum field.

Field	Value or pattern
Issuer	The Issuer value shown in the Brightspace tool registration details.
Platform KeySet URL	The Brightspace Keyset URL shown in the Brightspace tool registration details.
OIDC Authentication URL	The OpenID Connect Auth Endpoint shown in the Brightspace tool registration details.
OAuth Token URL	The Brightspace OAuth2 Access Token URL shown in the Brightspace tool registration details.
OAuth Server URL	The Brightspace OAuth2 Audience shown in the Brightspace tool registration details.

For the full Brightspace setup walkthrough, refer to Setting Up LTI 1.3 for Brightspace (D2L).

Moodle

After you register Vocareum as an external tool in Moodle, Moodle displays the values below in the tool's configuration details panel. Copy each value into the corresponding Vocareum field.

Field	Value or pattern
Issuer	`https://[your-domain]` (the Platform ID shown in the Moodle tool configuration details, which is your Moodle instance's base URL).
Platform KeySet URL	`https://[your-domain]/mod/lti/certs.php` (the Public keyset URL shown in the Moodle tool configuration details).
OIDC Authentication URL	`https://[your-domain]/mod/lti/auth.php` (the Authentication request URL shown in the Moodle tool configuration details).
OAuth Token URL	`https://[your-domain]/mod/lti/token.php` (the Access token URL shown in the Moodle tool configuration details).
OAuth Server URL	Leave blank unless Moodle's tool configuration details panel surfaces an OAuth audience value.

Blackboard

Blackboard Learn uses fixed values for the Issuer, OIDC Authentication URL, and OAuth Token URL across all institutions. The Platform KeySet URL is institution-specific and includes the Application ID assigned in the Blackboard Developer Portal.

Field	Value or pattern
Issuer	`https://blackboard.com`
Platform KeySet URL	`https://developer.blackboard.com/api/v1/management/applications/[application-id]/jwks.json` (replace `[application-id]` with the Application ID from the Blackboard Developer Portal).
OIDC Authentication URL	`https://developer.blackboard.com/api/v1/gateway/oidcauth`
OAuth Token URL	`https://developer.blackboard.com/api/v1/gateway/oauth2/jwttoken`
OAuth Server URL	Leave blank.

Open edX

After you create an LTI 1.3 configuration in Open edX, the platform displays the values below in the configuration details. The path placeholder [config-id] is the identifier Open edX assigns to the LTI configuration.

Field	Value
Issuer	`https://[your-domain]` (your Open edX instance's base URL, for example `https://openedx.example.com`).
Platform KeySet URL	The Keyset URL shown in the Studio LTI Consumer component's generated credentials.
OIDC Authentication URL	The Login URL shown in the Studio LTI Consumer component's generated credentials.
OAuth Token URL	The Access Token URL shown in the Studio LTI Consumer component's generated credentials.
OAuth Server URL	Leave blank unless the Open edX configuration details surface an OAuth audience value.

Common gotchas

A few small formatting issues are the most frequent cause of failed LTI 1.3 launches. Confirm each item below before saving the issuer entry in Vocareum.

No trailing slashes on any URL field. Even a single trailing slash on the Issuer, OIDC Authentication URL, or OAuth Token URL can cause the authentication handshake to fail.
No extra spaces, including leading, trailing, or embedded spaces, on any value. This applies especially to the Client ID and Deployment ID, where invisible whitespace is easy to introduce when copying from the LMS.
Exact-match required between values generated by the LMS and values entered in Vocareum. Copy and paste the Client ID, Deployment ID, and any other LMS-generated identifier rather than re-typing.
Issuer value matches the LMS vendor's fixed issuer where applicable (for example, https://canvas.instructure.com for Canvas and https://blackboard.com for Blackboard), not your institution's host. Institution-specific hosts go in the OIDC Authentication URL and OAuth Token URL fields instead.
LTI extensions enabled on the LMS side. Confirm that Assignment and Grade Services, Names and Role Provisioning Services, and Deep Linking are enabled in the LMS tool registration if your integration relies on grade passback, roster sync, or assignment selection.

LTI 1.3 Configuration URLs and Fields