Supporting the LTI protocol in KeyCloak

1

LTI (Learning Tools Interoperability Core Specification 1.3 | IMS Global Learning Consortium) is an IDP initiated protocol that is similar to OIDC. I have some ideas about how this could be supported using server REST endpoints but wanted to ask here to se if anyone has covered this ground previously.

The desire is to support an LTI launch that establishes a KC session and session cookie, and either launches into the target as an OIDC app or and LTI Tool Producer.

Thanks!

2

Authentication: Platforms in LTI acts as OpenID Providers and LTI Messages are OpenID tokens communicating the End-User’s identity from the platform to the tool using the OpenID third-party initiated login flow. See the IMS Security Framework [SEC-10] for more details.

From that link you posted, it looks like LTI uses OIDC What is different?