LTI authentication not working

by Mark Berthelemy.  

Hi all,

I am running two Moodle 3.2 sites locally.

One is setup as an LTI provider, and the other as an LTI consumer.

Steps to replicate:

• In LTI Provider:
  

1. 1. Enable LTI authentication plugin
   2. Enable Publish as LTI tool
   3. Allow frame embedding = On
   4. Web services: On (this isn't in the docs, but seemed to fix an error where the web service couldn't be found)
   5. Create a course
   6. Add a SCORM activity to the course
   7. Set the SCORM activity so that students do not see the course structure screen, and display = embedded
   8. Add Publish as an LTI tool enrolment method
   9. Set enrolment method settings: tool to be published, secret key, user synchronization = No

• In LTI Consumer:

1. Create a course
2. Add External tool activity
3. Configure activity with the URL of the SCORM package in the Provider, secret key, consumer key and display = embedded
4. Enrol test.user in course
5. Login as test.user
6. Access the External tool within the course

Expected behaviour:

• The SCORM package should display in an iframe with no headers or footers from the Provider site
  
• The Provider should list test.user as an enrolled user in the provided course

Actual behaviour:

• If not already logged into Provider site, the login page displays in the iframe on the Consumer site
• No new users are registered or enrolled on the Provider site

Is this a bug, or have I missed something during the configuration process?

Thanks,

Mark