Connect RansomLeak to Canvas with LTI 1.3

Prerequisites

• Admin access to your RansomLeak tenant
• Canvas account admin rights
• Permission to add Developer Keys
• Canvas email matches each user's RansomLeak email

Setup is a two-way exchange. You paste RansomLeak's tool URLs into a Canvas Developer Key, then paste Canvas's identifiers back into RansomLeak. Keep both admin tabs open. For help during setup, email support@ransomleak.com.

Get your RansomLeak tool details

In RansomLeak, open Admin → Integrations → LTI. Copy the three tool URLs and your public key. These are unique to your tenant.

Create an LTI key in Canvas

1. In Canvas, go to Admin → Developer Keys, then choose + Developer Key → + LTI Key.

2. Set Method to Manual Entry and fill in:

   • Key Name: RansomLeak
   • Redirect URIs: your Launch URL
   • Target Link URI: your Launch URL
   • OpenID Connect Initiation Url: your Login URL
   • JWK Method: Public JWK URL, then paste your Public JWK URL

3. Under LTI Advantage Services, turn on the gradebook scopes so scores can post back:

   • Can create and view assignment data in the gradebook associated with the tool
   • Can view submission data for assignments associated with the tool
   • Can create and update submission results for assignments associated with the tool

4. Under Placements, add Course Navigation for a simple launch. Click Save.

5. Set the key's state to ON, then copy its Client ID (the long number in the Details column).

Install the app and get the Deployment ID

1. Go to Admin → Settings → Apps, then View App Configurations → + App.

2. Set Configuration Type to By Client ID, paste the Client ID, and submit to install.

3. Open the installed RansomLeak app's settings (the gear icon) and copy its Deployment ID.

Connect Canvas back to RansomLeak

1. Return to Admin → Integrations → LTI in RansomLeak and choose Register a platform.

2. Enter your Canvas Client ID and Deployment ID, plus the Canvas platform endpoints:

   Issuer https://canvas.instructure.com

   Authentication URL https://sso.canvaslms.com/api/lti/authorize_redirect

   Token URL https://sso.canvaslms.com/login/oauth2/token

   JWKS URL https://sso.canvaslms.com/api/lti/security/jwks

3. Save and enable the registration. The connection is now live.

Add training to a course

1. Open a Canvas course, go to Settings → Navigation, move RansomLeak into the enabled list, and save. The tool appears in the course menu.

2. To grade it, add an Assignment with Submission Type: External Tool and pick RansomLeak. Set the points so the gradebook column is created.

3. Learners launch RansomLeak over single sign-on. When they finish, the score posts back to the Canvas gradebook through Assignment and Grade Services.

Troubleshooting

Frequently asked questions

Does RansomLeak support Canvas LTI 1.3?

Yes. RansomLeak registers as an LTI 1.3 tool through a Canvas Developer Key, launches over single sign-on, and posts completion and score back with LTI Advantage Assignment and Grade Services (AGS).

Does this work on Canvas Cloud and self-hosted Canvas?

Both. The steps are the same. On self-managed or regional Canvas, confirm the platform issuer and the authentication, token, and JWKS URLs for your instance before you register it in RansomLeak.

Where do scores land in Canvas?

In the Canvas Gradebook column tied to the RansomLeak assignment or external tool. When a learner finishes an exercise, the score posts back automatically over AGS, with no CSV export.

Can I deliver RansomLeak as SCORM instead?

Yes. You can export any course as a SCORM 1.2 or 2004 package and upload it to Canvas rather than using LTI. The LMS integration page covers both delivery methods.