Configuring LTI Integration in Canvas¶
This guide will show you how to connect Canvas to the Cyber Range as a Canvas administrator and as a Cyber Range Organization Admin.
Connecting to Canvas will allow your students to use the Cyber Range without leaving their Canvas window. When connected, all of your students in Canvas will be imported into the Cyber Range.
The Cyber Range uses LTI 1.3 to integrate into this service so any Learning Management System, such as Blackboard, that supports this standard should be compatible with the Cyber Range.
There are three sequential steps required to complete this integration and each will require a specific permission level:
- Setting up Canvas requires the Canvas administrator role.
- Setting up the Cyber Range requires the Cyber Range Organization Admin role.
- Linking Canvas to the Cyber Range requires the Canvas Teacher and Cyber Range Instructor roles.
1. Setting up Canvas¶
This section will require administrator permissions in Canvas to complete. For additional details on LTI 1.3 integration, we recommend checking out Instructure's documentation on configuring LTI 1.3.
Create a new LTI key¶
- Log into your administrator account in Canvas and navigate to Admin > Site Admin > Developer Keys
- On this page, click on "+ Developer Key" on the right side and select "+ LTI Key"
- Redirect URIs: https://api.uscyberrange.org/integrations/lti/1.3/redirect
- Target Link URI: https://api.uscyberrange.org
- OpenID Connect Initial URI: https://api.uscyberrange.org/integrations/lti/1.3/initiation
- JWK Method: Public JWK URL
- Public JWK URL: https://api.uscyberrange.org/security/jwks
- LTI Advantage Services: In the list of options, enable "Can retrieve user data associated with the context the tool is installed in." This will allow users to be synced between Canvas and the Cyber Range.
- Additional Settings: In the list of fields, setting the "Privacy Level" to Public will display the Canvas users' names and emails in the Cyber Range. Setting the "Privacy Level" to Private will assign randomly generated names (such as "Curious Penguin 13") to users to display in the Cyber Range instead.
For organizations with the Anonymous Users feature enabled, please be sure to set the privacy level setting to Private in your LTI configuration. Otherwise, the LTI integration will fail. This is designed to ensure user information is not shared.
- Placements: If you wish to set up this tool across all of your Canvas courses, make sure to include the "Course Navigation" option under the Placements section. This will automatically make the Cyber Range application appear in your existing courses. If you wish to make customizations to navigation and placement within Canvas, please see the Canvas Course Navigation Placement documentation for more information.
Retrieve Client ID¶
- Ensure that you see your new LTI key on the Admin > Site Admin > Developer Keys page. The State of the key should be set to ON if it is not already.
- In the Details column, you will see a long number that represents the Client ID of that developer key. Take note of this number, as it will be needed in the next step.
Add Cyber Range App to Canvas¶
- In the Canvas course that you want to add the Cyber Range app to, navigate to Settings > Apps
- Click on the "+ Apps" button
- Set the Configuration Type to "By Client ID" then paste your Development Key's Client ID into the second text box. Click Submit complete the App creation.
Retrieve Deployment ID¶
- Within the same Apps tab, click on the gear icon to the right of your new Cyber Range app.
- Select "Deployment Id" to view the Deployment ID.
- Take note of this deployment ID and save it for later. You will need this to connect the Cyber Range to Canvas.
2. Setting up the Cyber Range¶
This section will require organization admin permissions in the Cyber Range. You can configure this at the organization level, which will allow your instructors to sync their Canvas courses with the Cyber Range.
Navigate to Applications Page¶
- Log into your Cyber Range account and navigate to the Exercise Area.
- Click on the Organizations tab and select your organization
- Click on the "Manage Organization Applications" button
Add the Application to your Cyber Range Organization¶
- Click the "Add an Organization Application" button denoted by a "+"
- In the "Type" dropdown box, select LTI 1.3
- Give the new application a memorable name (i.e. Canvas Integration)
- Fill out the rest of the form based on the information below:
- Issuer: For production instances of Canvas, this will always be https://canvas.instructure.com. For test or beta instances, it will be https://canvas.test.instructure.com or https://canvas.beta.instructure.com.
- Client ID: Client ID retrieved from Canvas. Please see the section above titled Retrieve Client ID for more information.
- Key Set Url: https://[SCHOOL CANVAS DOMAIN]/api/lti/security/jwks
- Access Token Url: https://[SCHOOL CANVAS DOMAIN]/login/oauth2/token
- Authentication Url: https://[SCHOOL CANVAS DOMAIN]/api/lti/authorize_redirect
- Deployment Ids: Deployment ID from Canvas. Please see the section above titled Retrieve Deployment ID for more information.
[SCHOOL CANVAS DOMAIN] refers to the domain name that your school uses for Canvas. It will likely take a form like this: canvas.your-school.edu.
3. Linking Canvas to the Cyber Range¶
Create a Course¶
If you don't already have a course in the Cyber Range, you should create one now. Please see the article titled Creating a Course for more information. Make sure that you are designated as the instructor of the course before trying to complete the connection.
Log into your Cyber Range Account in Canvas¶
- In your Canvas course, you should see the app you created earlier along the left navigation pane. Click on the app you created. Our sample app was called "Cyber Range-DEV".
- If the connection was successful, you should now see a prompt to login using the authentication provider of your choice. Choose the login option that corresponds to your Cyber Range instructor account.
Choose a Cyber Range Course for Integration¶
- After logging in, you will be presented with a drop-down box that includes all of your Cyber Range courses. Select the course you want to link.
- Click "CONFIRM" and wait for the courses to be linked.
- Once it has finished the linking process, you will see the Cyber Range UI integrated into your Canvas window.
Unlinking an LTI Integration¶
In the case you accidentally link the wrong course in the Cyber Range to Canvas, please follow these steps below to unlink an LTI integration.
First, begin by navigating to the Course that was linked to Canvas. Select the Manage Course Applications button located to the right of the Users button.
Now that you are in the Applications page, you can see the LTI integration that is connecting the course to Canvas. Select the cog wheel icon, where you will have the options to edit or delete your integration. In this case, you will select Delete.
Once you have selected the option to delete the integration, you will be met with a confirmation message stating that applications cannot be restored. Check the box stating you understand, then select Delete.
The integration has now been successfully unlinked from Canvas. You can repeat the steps above to reconfigure your correct Cyber Range course in the section titled Linking Canvas to the Cyber Range.
Have a Question? Contact Support¶
We're here to help you. If you still have questions after reviewing the information above, please feel free to submit a ticket with our Support Team and we'll get back to you as soon as possible.
Thank You for Your Feedback!