Problems going through this process about learn-lti HOT 3 CLOSED

Can I suggest you unistall the solution ensure your running the versions below - Ensure your running the command from the specific version of the Azure CLI see https://github.com/microsoft/Learn-LTI/blob/main/docs/TROUBLESHOOTING.md

To begin, you will need:

Azure CLI readme about Azure CLI
We currently recommend using Microsoft Azure CLI version 2.27.0
To download the MSI installer for specific version, change the version segment in URL https://azcliprod.blob.core.windows.net/msi/**version**.msi and download it. Available versions can be found at Azure CLI release notes.
DotNet Core SDK .NET Core 3.1
Node.js
Powershell
Git
An Azure subscription

from learn-lti.

Please follow
https://github.com/microsoft/Learn-LTI/blob/main/docs/DEPLOYMENT_GUIDE.md - Deployment Guide
https://github.com/microsoft/Learn-LTI/blob/main/docs/CONFIGURATION_GUIDE.md - Configuration Guide

from learn-lti.

@brockettc

This should unblock you: MS Learn LTI Missing Permissions

In Azure Portal https://portal.azure.com/

Go to Home/ Lab Directory Apa registration then the name of your MS Learn LTI Tool

You need to follow these 4 more steps to ensure the permissions are not a problem

1 We have seen in some case the Batch file only has added the default permission of User.Read.

But we also need to additional permissions please follow the following steps to add the missing permissions.

Please check the following under the Manage Navigation menu of your Application Registration.
"Owners" and ensure the email matches the login account - you need to be using this account to login to first setup the config page

2 We need to add under "Authentication" the Reply URL with no selection of authorization endpoints. THE URL Should be the URL of your Azure Function App for the Learn LTI

3 Needs to add user_impersonation scope under “Expose an API”.

4 Need to modify the "Manifest" and update the “optionalClaims” with the following json.

{

    "idToken": [], 

    "accessToken": [ 

        { 

            "name": "email", 

            "source": null, 

            "essential": false, 

            "additionalProperties": [] 

        }, 

        { 

            "name": "family_name", 

            "source": null, 

            "essential": false, 

            "additionalProperties": [] 

        }, 

        { 

            "name": "given_name", 

            "source": null, 

            "essential": false, 

            "additionalProperties": [] 

        } 

    ], 

    "saml2Token": [] 

} 

You can add these steps directly by modifying the Deploy.ps1 script but you can manually to make it work by simply undertaking the edits above.

from learn-lti.