Setting up an LTI Provider connection requires administrator access to Rise Up, as well as administrator access to the external LMS (the consuming platform).
On the external LMS side, LTI 1.3 and external tools must be enabled. Exact menus vary by LMS, but the overall configuration principle stays the same.
The learning content you want to share must already be available and published in Rise Up, and the content perimeter to expose to the external LMS must be identified before you start.
The integration is configured on both systems, in this order: Rise Up's endpoints are first used to register Rise Up in the consuming LMS, then the consuming LMS is registered in Rise Up using the information it generates in turn.
Access this configuration from Settings > LTI connection.
The LTI Provider feature lets Rise Up act as a content source for third-party LMS platforms (for example Moodle, Cornerstone, SAP SuccessFactors or Canvas). Learners access Rise Up content directly from the external LMS — authenticated via SSO — without a separate sign-in. The training displays embedded in the LMS interface, and progress and grades are automatically sent back to the LMS.
This feature supports the LTI 1.3 standard (LTI 1.1 is not supported) and covers: SSO launch, Deep Linking (selecting training from the external LMS), and Assignment & Grade Services (AGS) (progress and grade passback).
Each connection to an external LMS is associated with a Rise Up perimeter — either an internal perimeter or a specific client perimeter — which determines which users can launch training via that connection and which courses are available for selection in Deep Linking.
Key use case: organisations that manage their learners in a separate LMS and want to distribute Rise Up content without migrating platforms.
This guide illustrates the procedure using a recorded demo built with Moodle as the consuming LMS. Menus may differ slightly in another LMS, but the required LTI 1.3 values and overall configuration logic remain similar.
- LTI 1.3 endpoints: Rise Up exposes four endpoints, specific to your platform — OIDC Login Initialisation, LTI Launch URL, Redirection URL and JWKS URL. These values are fixed: they don't change from one connection to another. LTI messages are validated against a signature checked against the JWKS endpoint. LTI 1.1 is not supported.
- SSO launch: learners access Rise Up content from the external LMS without a separate sign-in. The training displays embedded in the LMS via the embed_view=1 parameter.
- User identification: users are uniquely identified by the combination of the issuer and subject (sub) from the LTI token, not by email address.
- Just-in-time provisioning: if the learner doesn't have a Rise Up account, one is created automatically with their first name, last name, username, client ID (or none for an internal perimeter), and the company's default language. No email address is stored, and the account is flagged with an LTI enrolment origin. Users outside the connection's perimeter are denied access.
- Automatic enrolment: if the learner isn't enrolled in the target course at launch time, enrolment is created automatically.
- Grade and completion passback (AGS): Rise Up sends the score achieved, maximum score, progress and completion status back to the LMS when a learner completes a graded activity. Grade sync must be explicitly enabled on the LMS side when the tool and the activity are configured. Evaluations are not currently compatible with LTI Provider.
- Deep Linking: LMS administrators can browse and select Rise Up training directly from the LMS interface during configuration, using filters (search, modality, language). The list of available courses is filtered according to the client perimeter configured on the connection.
I — Retrieve the Rise Up LTI endpoints
Sign in to Rise Up with an administrator account.
- Open Settings.
- Locate the LTI connection section.
- Expand LTI endpoints.
Rise Up displays the four endpoints required to configure an LTI 1.3 connection. These values are specific to your platform and are shared across every LMS connection you create:
- OIDC Login Initialisation
- LTI Launch URL
- Redirection URL
- JWKS URL
Each field includes a copy button. They typically follow a structure similar to:
https://<your-rise-up-domain>/api/lti/tool/login
LTI Launch URL:
https://<your-rise-up-domain>/api/lti/tool/launch
Redirection URL:
https://<your-rise-up-domain>/api/lti/tool/launch
JWKS URL:
https://<your-rise-up-domain>/api/lti/tool/jwks
II — Register Rise Up as an external tool in the LMS
This step takes place in the external LMS. Exact menus vary by platform; the example below follows a recorded demo built with Moodle as the consuming LMS, but the required LTI 1.3 values and configuration logic stay similar elsewhere.
In Moodle:
Site administration > Plugins > Activity
modules > External tool > Manage tools,
then select
the option to configure a tool manually. Enter a
recognisable name, for example: Rise Up LTI Connection.
Then complete the configuration using the Rise Up endpoints
retrieved in the previous step:
| LMS field (Moodle example) | Rise Up value |
|---|---|
| Tool name | A recognisable name for the connection |
| Tool URL | LTI Launch URL |
| LTI version | LTI 1.3 |
| Public key type | Keyset URL |
| Public keyset | JWKS URL |
| Initiate login URL | OIDC Login Initialisation |
| Redirection URI(s) | Redirection URL |
The description is optional but can help administrators understand the purpose of the tool.
For Tool configuration usage, select Show as preconfigured tool when adding an external tool, so course creators can select the Rise Up tool directly when adding an activity.
Next, enable Supports Deep Linking (Content-Item Message) — required to open the Rise Up content selector from the LMS — and choose a launch container (for example "Embed, without blocks" to display Rise Up content embedded in the LMS interface, without the LMS's surrounding course blocks). The Content Selection URL field can be left empty unless your Rise Up implementation documentation specifies otherwise.
To enable grade passback, open the Services tab and set IMS LTI Assignment and Grade Services to Use this service for grade sync and column management. Then, in the Privacy tab, set Accept grades from the tool to As specified in Deep Linking definition or Delegate to teacher. Save.
Once the tool is saved, the LMS generates its own platform details, available in the tool's configuration details:
- Platform ID (sometimes called the "Issuer" or "Platform Issuer")
- Client ID
- Deployment ID
- Public keyset URL
- Access token URL
- Authentication request URL
III — Add the external LMS in Rise Up
Return to the LTI connection page in Rise Up and select Add external tool. The wizard runs in two stages: General information, then Configuration.
Stage 1 — General information
- Name — a recognisable name for the consuming LMS (for example "Moodle LTI Connection").
- Content perimeter — the Rise Up perimeter (internal or client) this LMS will have access to. This setting determines which content appears in the Deep Linking content selector.
- Logo — mandatory; it helps administrators visually identify the external LMS.
- Description — optional, useful for noting the organisation or use case involved.
Select Next.
Stage 2 — Configuration
Enter here the platform details generated by the external LMS in Step II:
| Rise Up field | Value provided by the external LMS |
|---|---|
| Platform issuer | Platform ID |
| Client ID | Client ID |
| Deployment ID | Deployment ID |
| Authentication request URL | Authentication request URL |
| Access token URL | Access token URL |
| Public keyset URL | Public keyset URL |
Save. The two systems now recognise each other: Rise Up can validate the LMS, and the LMS can validate Rise Up.
IV — Select content and verify grade passback
To test the connection, the LMS administrator adds Rise Up content to a course (Moodle example):
- Turn Edit mode on.
- Open the section where the content should appear.
- Select "Add an activity or resource".
- Choose "External tool".
- Select the preconfigured Rise Up tool.
- Open the content-selection option.
The Rise Up selector then opens inside the LMS and displays the content available within the configured perimeter, with search, modality and language filters. Once training is selected and confirmed, Rise Up returns the selection to the LMS.
Before saving the activity, enable grade sync: under the Grade option, select Allow [tool name] to add grades in the gradebook. The LMS then creates the activity linked to the chosen content. Evaluations are not currently compatible with LTI Provider.
Save and open the activity to launch the content. A successful launch should:
- authenticate the learner through LTI 1.3;
- open the selected Rise Up content;
- display the content using the chosen launch container;
- avoid asking the learner to sign in to Rise Up separately;
- show the expected learner interface and progress information.
Rise Up automatically sends the learner's performance data back to the external LMS when they complete a graded activity (via the LTI Assignment & Grade services): score achieved, maximum score, progress status and completion status.
Learner access is also fully automated at launch time:
| Scenario | System behaviour |
|---|---|
| The learner has a Rise Up account and is enrolled | The launch succeeds immediately. |
| The learner has a Rise Up account but isn't enrolled yet | Enrolment is created automatically. The launch proceeds. |
| The learner doesn't have a Rise Up account | The account is created automatically (no email address is stored). Enrolment is created. The launch proceeds. |
| The learner is outside the connection's perimeter | The launch is refused. The learner cannot access the content. |
V — Troubleshooting
LTI connection issues almost always come down to a value that was copied incorrectly from one system to the other. Check the following depending on the symptom you're seeing.
Likely cause: incomplete LTI configuration on the LMS side. Resolution: confirm the tool uses LTI 1.3, that Deep Linking ("Content-Item Message") is enabled, that the OIDC login and redirection URLs were copied from the correct Rise Up environment, and that the connection has been saved in Rise Up.
Likely cause: the Platform issuer field in Rise Up doesn't exactly match the Platform ID supplied by the LMS. Resolution: check the values match exactly, including the protocol (https://) and domain.
Likely cause: the Client ID or Deployment ID doesn't match this tool registration. Resolution: verify that both values come from the same external-tool registration in the LMS. Don't reuse identifiers from a different tool or environment.
Likely cause: incorrect cross-configuration of the public keys. Resolution: confirm the LMS's "Public keyset" uses the Rise Up JWKS URL, and that Rise Up's "Public keyset URL" uses the LMS's public keyset URL. Also check that both URLs are publicly reachable over HTTPS.
Likely cause: the content perimeter doesn't include the requested course, or the course isn't published. Resolution: check the content perimeter selected on the Rise Up connection and confirm the course is published and accessible to the relevant audience.
Likely cause: the wrong launch container was selected on the LMS side. Resolution: review the default launch container (for example "embed, without blocks", an existing window, or a new window) based on the intended learner experience.
Likely cause: grade sync wasn't enabled on the LMS side. Resolution: on the tool configuration, confirm the Services tab has IMS LTI Assignment and Grade Services set to use the service for grade sync, and that Privacy is set to accept grades from the tool. On the activity itself, confirm the Grade option allows the tool to add grades to the gradebook.
FAQ & Troubleshooting
-
Issue: learners are denied access when launching training from the external LMS.
Resolution: users outside the Rise Up connection's perimeter are denied at launch. Check that the learner's attributes match the connection's configured perimeter in Settings > LTI connection. Also verify that the LMS is sending the correct user identifiers in the LTI launch message.
Issue: a user already exists in Rise Up with the same username, but the launch is still refused.
Resolution: the existing user doesn't belong to the perimeter associated with this connection. A user must belong to the connection's perimeter to launch it — this is expected behaviour, not an error.
Issue: grade and completion data doesn't appear in the external LMS after training is finished.
Resolution: passback is triggered when a learner completes a graded activity in Rise Up, but the LMS side must also be configured to accept it. Check that the tool's Services tab uses the IMS LTI Assignment and Grade Services for grade sync, that Privacy is set to accept grades from the tool, and that the Grade option was enabled on the activity itself. Also verify the course contains a graded activity that has actually been completed, and that the connection uses the correct client ID.
Issue: the Deep Linking content selector shows no courses.
Resolution: the connection must be linked to a Rise Up perimeter containing published and visible courses. Confirm the perimeter assigned to the LTI connection has published, visible courses in the catalogue for the relevant user.
-
Which LMS platforms are compatible with LTI Provider?
— Any LMS that supports LTI 1.3. Common examples include Moodle, Cornerstone, SAP SuccessFactors and Canvas. Configuration steps on the LMS side vary by platform. LTI 1.1 is not supported.
Do Rise Up's LTI endpoints change depending on which LMS is connected?
— No. The four endpoints (OIDC Login Initialisation, LTI Launch URL, Redirection URL, JWKS URL) are specific to your Rise Up platform and stay the same no matter how many external LMS connections you set up.
What user data is stored during just-in-time provisioning?
— Rise Up stores the first name, last name, username, client ID (or none for an internal perimeter), and the company's default language. No email address is stored.
Can the same LMS have several connections pointing to different Rise Up perimeters?
— Yes. Each connection is configured independently with its own perimeter and an optional client ID. Multiple connections can coexist independently, even from the same LMS platform.
Can a course creator select any Rise Up course during Deep Linking?
— No. Only courses visible in the admin for that user, and filtered according to the connection's client perimeter, are shown in the selector.
Does enabling Deep Linking automatically enable grade sync?
— No. Deep Linking only controls content selection. Grade sync is a separate setting: it must be enabled on the tool (Services and Privacy tabs) and on the activity itself (the Grade option), or scores won't reach the LMS gradebook.
Is evaluation supported through LTI Provider?
— Not currently. Evaluations are not compatible with LTI Provider at this time.
Is progress passed back in real time or in batches?
— Passback is event-driven — triggered on completion of a graded activity. [Exact timing and behaviour to be confirmed with the technical team.] -
Contact Rise Up support
Manage integrations and applications
Set up SSO authentication
Manage perimeters and visibility