response_type: id_token (required, the tool must use a value of id_token)

redirect_uri: https://lti-ri.imsglobal.org/lti/tools/3767/launches (required, This URI must exactly match a value pre-registered with the platform)

response_mode: form_post (required, tools and platforms must support a value of form_post)

client_id: my-private-client (required, client identifier valid at the Platform)

scope: openid (required, must contain the openid scope value)

state: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IktOV0dpWWVnSmNCZDVDaDhsVTJFbHZTT1daN0t0NnZ5eVQwVWMydFFuRTAiLCJ0eXAiOiJKV1QifQ.eyJ0b29sX2lkIjozNzY3LCJzdGF0ZV9ub25jZSI6IjNiOGZlNTUwZmVmNDRjNWJhYjI2IiwicGFyYW1zIjp7ImNvbnRyb2xsZXIiOiJsdGkvbG9naW5faW5pdGlhdGlvbnMiLCJhY3Rpb24iOiJpbmRleCIsInRvb2xfaWQiOiIzNzY3In0sImlzcyI6ImludGVncmF0aW9uLTU1Iiwic3ViIjoibXktcHJpdmF0ZS1jbGllbnQiLCJhdWQiOiJodHRwczovL2x0aS1yaS5pbXNnbG9iYWwub3JnL3BsYXRmb3Jtcy80MTEzL2FjY2Vzc190b2tlbnMiLCJpYXQiOjE3Nzk4MDY3MTIsImV4cCI6MTc3OTgwNzAxMiwianRpIjoiZWYzNTk3NzcwOTE3OTA5NjQwMzAifQ.SjJ0UhLa1LIjk7LjAvhiTagOqEtvXMuxKDjUJjE6igkpNxQNl3VChkgGPergOdZEK89RvWCCmGWni0egrbXEkvxqFS4FDYE0t_I1SzTWBPE9M4Hq-VZqAC7ph7RI-YMip5AlZ5NXUE_4RWJWDnNJS87_qKHd3JGCpqhnOZbqYYkl3Y1jeakcpB4fmbTK3Jv-RKD9j9wAJ2uEBvgyn7rzfTZzQ5Xd-CzG57R0YM2Dxslmt6hP4LZBsXIF77ZmndSgcFr4t3zvfz3QdvOvWSX8q1L3nkAnNjoFhBMkwRPdz4DISxmjuLAxVEZktkFDBCSPsv1KX4etjTLp4lvfO7VNbQ (required, opaque value used to maintain state between the request and the callback)

login_hint: (required, tools and platforms must support a value of form_post)

lti_message_hint: (required, a platform opaque identifier identifying the user to login)

prompt: none (optional, The tool should use a value of none. In the future a re-launch flow may support additional values being used here)

nonce: 3b8fe550fef44c5bab26 (optional, string value used to associate a client session with an ID token, and to mitigate replay attacks)