Allow Sharing PII to LTI Components

Allow Sharing PII to LTI Components#

Tags: educator reference

Personally identifiable information (PII) sharing controls determine whether an LTI Consumer XBlock can send a user’s username, full name, or email address to an external LTI tool during launches. For Names and Role Provisioning Services (NRPS), PII sharing can include only a user’s full name and email address.

By default, course teams cannot edit LTI PII sharing settings in Studio. A site operator must enable LTI PII sharing for the course before course teams can select the user information to share for each LTI component. For more information, see Manage LTI PII Sharing for a Course.

Warning

Share only the user information required by the LTI tool. Follow your organization’s privacy and data governance policies before you select component-level sharing settings.

Data Sharing Prompt for Tool Launches#

LTI PII sharing behavior depends on how the tool receives user information.

LTI interaction

What controls PII sharing

User prompt

Tool launch in the LMS

The LTI Consumer XBlock settings for username, full name, and email control which values are included in the launch.

The user sees a consent prompt before launch when one or more PII fields are selected.

Deep linking launch in Studio

The LTI Consumer XBlock settings for username, full name, and email control which values are included in the deep linking launch.

User consent is not collected because course staff run the Studio deep linking workflow.

Names and Role Provisioning Services (NRPS)

The course-level LTI PII sharing flag controls whether NRPS responses include PII. When the flag is enabled, NRPS responses include full name and email address, but not username.

No user consent is collected for NRPS requests.

Configure PII Sharing in an LTI Component#

After a site operator enables LTI PII sharing for the course, course teams can select which user information an LTI Consumer XBlock shares with the tool.

  1. In Studio, open the unit that contains the LTI Consumer XBlock.

  2. Select Edit.

  3. Select the Review Options tab.

    LTI Consumer XBlock Review Options tab showing Share Username, Share Full name, Share Email, and Data Sharing Notice fields.

    The Advanced Information Sharing section includes settings for sharing username, full name, email, and a data sharing notice.#

  4. In the Advanced Information Sharing section, select only the user information that the tool requires.

    • Share Username

    • Share Full name

    • Share Email

  5. In Data Sharing Notice, add a short explanation of why user information is shared with the tool.

  6. Select Save.