University of Illinois, General LTI Integrations

UIUC General LTI Integration Requirements

Learning Tools Interoperability (LTI) is a collection of learning technology standards maintained by the IMS Global Learning Consortium to seamlessly integrate an external (vended) learning application into their courses. This includes a standard protocol for establishing a trusted relationship between the tool provider and the Leaning Management System (LMS), allowing students and teachers to have a seamless, integrated experience when using the tool within the course environment. To facilitate this process Provacy/Security and Governance have been engaged to assist with review and rating of any integration to be used with any Learning Management System (such as Canvas@Illinois and Illinois Compass).

Why is this necessary now?

In the past, the university’s third-party solutions received a cursory review prior to deployment within an LMS. But over the past few years, the university has been operating under a State of Illinois audit finding that we have not been properly vetting third party service providers before allowing them access to restricted university data, such as student education records. For this reason all third-party contracts receive this newer, more extensive review.

The Process:

To get started with your own learning integration, please request a vendor risk assessment here:  https://go.illinois.edu/vendorrisk

In addition to a written statement of use, the following items may be required when requesting a vended learning integration:

• Contact(s) within the requesting department or unit
• Copy of contract or agreement between the integration provider and University representative
  • This can be an instructor, purchasing representative, or anyone with the authority to enact a contract with a content provider
  • Please include proof of payment if this is a paid service
  • Costs that may be required by the student or end user in order to access vended/integrated content
• Technical and support contact(s) for the integration provider
• Target service for installation (ex: Canvas, Illinois Compass, etc.)
• Installation/setup method/documentation
  • Including connection method (usually provided in the form of key/secret and connection URL)
• End-user support contact and documentation, including escalation path and self-help support documentation (to be added to this Knowledge Base)
• Accessibility statement or certification (ex:  WCAG 2.x, VPAT)
• Security statement or certification (ex:  SOC2)
  • Also, any University-specific user, program or course-specific information that will be shared with integration
  • Statement of vendor data stewardship, if available
• Signed FERPA addendum:  https://go.illinois.edu/ferpabuy

Following a successful risk review, the LTI is subject to an accessibility review. Accessibility resources:

IT Accessibility Policy

Campus Administrative Manual Policy

US Federal Section 508

State of IL IITAA Standards

A significant, show stopping issue with any of these reviews may be cause to disallow the integration within the Canvas@Illinois environment.

How long can I expect this review to take?

Current LTI Availability