response_type: id_token (required, the tool must use a value of id_token)

redirect_uri: https://lti-ri.imsglobal.org/lti/tools/2467/launches (required, This URI must exactly match a value pre-registered with the platform)

response_mode: form_post (required, tools and platforms must support a value of form_post)

client_id: tool-client-id (required, client identifier valid at the Platform)

scope: openid (required, must contain the openid scope value)

state: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Im9ua2FCdUloWVRTTl91UXdEZW5wYTVBd1gyQVRmb1dUZ2NFaHFGdFZZZkUiLCJ0eXAiOiJKV1QifQ.eyJ0b29sX2lkIjoyNDY3LCJzdGF0ZV9ub25jZSI6IjU2YzgxMjZmYTMwM2ViMTJmZWQzIiwicGFyYW1zIjp7ImNvbnRyb2xsZXIiOiJsdGkvbG9naW5faW5pdGlhdGlvbnMiLCJhY3Rpb24iOiJpbmRleCIsInRvb2xfaWQiOiIyNDY3In0sImlzcyI6InRvb2wtbmllayIsInN1YiI6InRvb2wtY2xpZW50LWlkIiwiYXVkIjoiIiwiaWF0IjoxNzc5ODIxMDUzLCJleHAiOjE3Nzk4MjEzNTMsImp0aSI6IjRiYzQ0YjdkOWNkMzFlODNiYmRlIn0.1HKU3RsB1G2qjCB9q7IgAd6kMsl_8vpubzDhaZJuj-5eE3Cif7JvKdg_kDp56qiZZjpXnJ_QkgcG1mxomAvaGE1I-ApL5ZzOxwv-Wn-BLX-V_UsMSKYvu8mEQCNs1HWUdSupxShOxGkHZezTXGCC_rhsBiSEAWhnrxGqpjNdx7YDIN70oLZIKw4sVEXbMGZBlN72GnOnWXkziErbjWWhZSW5UNpSly3g_Bqp1azAcU7y_AQZ8yNtxpUI6KtiNFPsYw3Gr1bHUv4YxEcz8pybOkVM_8WtZ48mB2FrQjaXFEUlPH7jHPdc-Qo8bc0E6DV_nxPD32gfR3DB-Av0itZ30ECcKpDTnau271YkP7V-LV43NutwW51ojTiW5OaS3XGXzgjwHWIxALCpbPtrx7Lsds1F0t1YNs6Onj0-Zrfa_LuKIkL_xGNEE5t067ecHGu6ly667uz-7P2gGUq1bIpZYZSjpOAAF6Ywigmae21HpRwhPQXxLCxxU99X9FLlw0CFQ8Azi1sQMoiNwU_t3d3suTdYyGNOLfvmMlOXOxvY4Q82Adpc3u7-LIIJcFf09V5Y46JLxFkJJhCkZ2gP7MSo5c8MJ78QEI1Lm-XRC-PkKc6E5VUD51YK497mvgR7UmtZeRjV3nTcvbyMtkNJQ34ViXylyRyFOM-7wpzJJdQ6hBs (required, opaque value used to maintain state between the request and the callback)

login_hint: (required, tools and platforms must support a value of form_post)

lti_message_hint: (required, a platform opaque identifier identifying the user to login)

prompt: none (optional, The tool should use a value of none. In the future a re-launch flow may support additional values being used here)

nonce: 56c8126fa303eb12fed3 (optional, string value used to associate a client session with an ID token, and to mitigate replay attacks)