Canvas LTI Information

Connecting to Canvas using an LTI

Canvas uses LTIs to connect to other Learning Tools. LTIs can be installed in a single course, for all courses in a department or college, or for the entire University. Through the LTI standard, Canvas transmits data to other learning tools to allow linkages between those tools. This usually includes course and user data and can include other kinds of data, including grades, depending on how the interface is coded. It is possible that sensitive data (such as FERPA data) may be transmitted during this process.

In order to evaluate the nature of the data being transmitted, Xavier has a review process for any new LTI (this includes new versions of LTIs already in use) to evaluate the security of that LTI. This is the same process used to evaluate any new technology and can take 4-8 weeks, depending on the completeness of the vendor documentation and the complexity of the interaction.

To request an LTI to be installed at the campus, college, department level, you will need to do the following:

1. Collect the following information from the vendor of the external system:
   1. Documentation on how to install the LTI (this may include needing to add a Developer Key)
   2. Provide any contract needed as part of the use of this tool
   3. Identify who will be paying for this tool (note that some tools are free until you want to add an LTI and then you move to a pay model)
   4. Provide a VPAT for this tool from the vendor (this documents how accessible the tool is)
   5. For systems that are hosting Xavier data, you will also need a vendor completed HECVAT and SOC2 (these describe what they do to secure this data)
2. Email these documents to ITAcquisitions@xavier.edu to start the process

Faculty should note that most LTIs link to external systems where the faculty may have a login, but where IT may not. These LTIs must be supported by the vendor who provides them. Please be sure you have good support contacts before using them.

Faculty may continue to install LTIs in their course if no Developer Key is needed. Faculty should be careful that:

• No sensitive data is transmitted to the other system
• Faculty have clear directions for installing these LTIs in their course
• The other tool's environment is consistent with Canvas for ease of use by students
• Old LTIs are removed when copying an old course

Questions may be submitted via a Help Desk ticket at https://services.xavier.edu/TDClient/Requests/ServiceDet?ID=40