Prerequisites 2 Moodle sites (A, B). Site A and B should be on different domains. They can be on subdomains of the same domain, if at the same subdomain level Both sites have to be configured to use HTTPS. Setup Site A Login as admin. Access to "Site administration / Security / HTTP security" and enable "Allow frame embedding". Access to "Site administration / Plugins / Authentication / Manage authentication" and enable LTI authentication plugin. Access to "Site administration / Plugins / Enrolments /Manage enrol plugins" and enable "Publish as LTI tool" enrol plugin. Create a course and add a File resource with the ltipermissionstest.html uploaded (attached to this ticket). Go to the main course page and select the "Published as LTI tools" from the cog. Click the "Add" button and select in "Tool to be published" the file resource created previously. Site B Login as admin. Create an empty course and enrol student s1. Add a new External tool: Set the "Tool URL" to the "Cartridge URL" from the Site A published tool. Set the "Launch container" to "embed" (so it will display in an iframe). Set the "Consumer key" to "xxx". Set the "Shared secret" to the "Secret" from the Site A published tool. Testing instructions Login as student (s1) in site B. Go to the course and navigate to the external tool. Confirm that on you see requests for (geolocation, mic and camera) on your browser. Confirm that each feature (microphone, camera, midi, encrypted-media, geolocation) displays "Access granted" in the embedded file resource's output.   ALTERNATE USING TEST LTI Provider (test page was added to it) Note: This test is using ZTest with a newly added tab containing Justin's dedicated test page. Here the ZTest is configured using LTI 1.3 but it could also be configured with LTI 1.1 (secret is ztest-secret). This is orthogonal to the test at hand. Prerequisite Site is configured with at least one course and one instructor Installing ZTest with Public RSA Key (existing functionality) We first install ZTest. If ZTest is already installed from previous testing, you can skip. ZTest tool 1.3 is installed as a site external tool: Log in as an administrator Navigate to Site Administration > Plugins > External tool > Manage tools Click on configure a tool manually Fill the form as follow: Tool name: ZTest 1.3 Tool url: https://ztest.cengage.info/ztest/lti LTI Version: LTI 1.3 Choose Public Key Type: RSA Key Public key: copy the value from https://ztest.cengage.info/ztest/ LTI 1.3 Connect info tab Initiate Login URI: https://ztest.cengage.info/ztest/ws/lti/startlaunch?lti13=true&client_id=CLIENT_ID_HERE&platform=moodle Redirect URI: https://ztest.cengage.info/ztest/lti13 Click on ‘Show more’ Check Content-Item message Change the 'Privacy' setting ‘Accept grades from the tool’ to 'Delegate to Teacher'. In Services, IMS LTI Assignment and Grade Services, choose Use this service for grade and column mgmt Save changes. Once the tool is created, click the information icon (pie icon) and copy the client id Update the initiate login URI and replace CLIENT_ID_HERE with the client id value for that tool Verify deep linking IFrame permissions As instructor, log to a course Turn editing ON Click Add an activity or resource and select external tool On the Add external tool page, select ZTest 13 tool for preconfigured tool Click on Select Content In the modal: Click on pie icon and select IFrame Permission Check Confirm that on you see requests for (geolocation, mic and camera) on your browser. Confirm that each feature (microphone, camera, midi, encrypted-media, geolocation) displays "Access granted" assuming you granted access when prompted Close the Modal but stay on the add external tool page to carry on the test below. Verify regular LTI launch IFrame permissions Click on Select Content In the modal: Click on pie icon and select content-item Click Submit button Back on the external too page add, click Save and Display Click on IFrame Permission Check Confirm that on you see requests for (geolocation, mic and camera) on your browser. Confirm that each feature (microphone, camera, midi, encrypted-media, geolocation) displays "Access granted" assuming you granted access when prompted