Removing LTIs from past courses

canvas-admin

Hello,

We have been requested to remove LTI's from courses offered over four years ago. To do this manually would be impractical. Is there any api call offered by Instructure to deactivate/remove LTIs from old courses, while leaving them active for newer courses?

This question is only about the LTI's installed at the course level, not the ones installed at the Institution level.

Our security team is concerned about the vulnerability posed by LTIs in inactive courses. Has anyone addressed this issue at their school?

Thank you,
Michael Fraley
Applications Group
University of San Francisco

Chris

Hi @canvas-admin,

I could imaging a few different ways to try to tackle this...  Most importantly for any method, you'll want to check out the external tools api, as that will allow you to both list and delete the tools once you find them.

I think the most efficient method would be to run the LTI report from root account -> settings -> reports tab. With that report, you can filter down to things installed at the course level.  Alternatively, you could use the API to list all courses, then check each and every one for external tools.

Once you know which courses have tools installed, you can use the LIST method of the API to get the LTI's ID, and then the DELETE method to remove it.  

If you're familiar with APIs and a programming language like Python, these tasks shouldn't be too difficult to automate.

I hope this helps a bit.

-Chris