Prerequisites You will need two moodle sites. One must be a Moodle 3.2 site (SITE A). The other can be 3.1 or above (SITE B) Cartridge Tests Go to SITE A Enable the LTI authentication plugin. (Site administration ► Plugins ► Authentication ► Manage authentication) Then go to Site administration ► Plugins ► Enrolments ► Manage enrol plugins and enable Publish as LTI tool Create a course and add an activity (e.g. a Page resource). Under Course administration, click Enrolment methods Under Add a method select Publish as LTI tool . Enter a Custom instance name Under Tool to be published select Course Click Add method . Under Course administration, click Published as LTI tools . Take note of the cartridge (or tool) URL and secret to be used later. Go to SITE B Log in as admin. Create a course and enrol some students. Add an external tool activity. Enter a name for the activity. Enter cartridge/tool URL from SITE A into the Launch/cartridge URL field. Click Show more to expand the form. Enter any non-empty string value for the Consumer key . Enter the secret from SITE A into the Shared secret field. Click Save and return to course . Login as a student enrolled to the course and open the LTI tool. Confirm that it launches normally. Enter a different cartridge URL from Site A. On SITE B use the same consumer key you used before, and the new secret Ensure it launches correctly. Proxy Tests Go to SITE A Go to your list of tools Copy the url in the Proxy URL column for one of the tools Go to SITE B Go to Site administration ► Plugins ► External tool ► Manage tools Paste the url you copied into the box, but don't click add Change the token part of the url to something else such as "ASDF123" Click add Make sure that there is an error displayed Click cancel Paste the URL and this time click add with the correct token Click continue Click save The tool should successfully be added. Go to a course Add an external tool Select the type as the tool you just added Save and display Verify it works as expected and you log into SITE A correctly Go to SITE A Go to your list of tools Copy the url in the Cartridge URL column for one of the tools Go to the cartridge Copy the launch url from the XML Go to SITE B Go to Site administration ► Plugins ► External tool ► Manage tools Paste the url you copied into the box and click add Make sure you get an error Go to SITE A Go to your list of tools Copy the url in the Proxy URL column for one of the tools Go to SITE B Go to Site administration ► Plugins ► External tool ► Manage tools Paste the url you copied into the box and click add Make sure it adds correctly Go to a course Add an external tool Paste the proxy URL as the launch url Confirm you get an error Edit the tool or make another Select the new tool type you added Confirm the tool launches and you are able to do things in SITE A Try to hack in On site A, copy the proxy url of the first tool you shared Go to site B Go to Site administration ► Plugins ► External tool ► Manage tools Paste the proxy url Follow the registration process, until it's successfully added Go to SITE A, copy the cartridge url of the second tool you shared Paste it into your browser Copy the launch url Log in to the database of site B Find the database entry in mdl_lti_types that corresponds to the newly created tool (should have the highest id) Edit that entry Paste the launch url of the second tool that you copied before Go to site B Go to a course and add an external tool Select the tool type you added. Save and display Ensure you receive an error message. Go to Site administration ► Plugins ► External tool ► Manage tools Delete the tool type Copy the same proxy url from SITE A Go through the process Go to your course and select the new type Save and display Confirm you can successfully access the tool Go to site A Copy the cartridge url of the first tool Go to a course on site B Create an external tool Paste the cartridge url Copy the secret from site A invent a consumer key Go to the site Edit the tool again On site A, go to the cartridge url of the second tool and copy the launch url from the xml Change the launch url to the launch url of the second tool Try to launch Make sure you get an error. User images Give your profile a profile image if it doesn't already have one Apply the patch from MDL-37041 to a new moodle instance (site C) Go to site A and copy the cartridge url and secret On site C, create a new external tool instance and paste the cartridge url and secret View the tool Refresh the tool (it's not visible the first time. That is a pre-existing bug) Make sure the user image is visible in the iframe to site A On site A copy the proxy url On site C Set it up at Site administration ► Plugins ► External tool ► Manage tools Add that tool to a course View the tool Refresh the tool (it's not visible the first time. That is a pre-existing bug) Make sure the user image is visible in the iframe to site A PHPUnit Run PHPUnit for enrol_lti on MySQL, Maria DB, PostgreSQL, MSSQL, and Oracle servers. vendor/bin/phpunit --testsuite enrol_lti_testsuite or if using MDK, mdk phpunit -r -s enrol_lti Confirm that there are no errors nor failures.