response_type: id_token (required, the tool must use a value of id_token)

redirect_uri: https://lti-ri.imsglobal.org/lti/tools/3767/launches (required, This URI must exactly match a value pre-registered with the platform)

response_mode: form_post (required, tools and platforms must support a value of form_post)

client_id: my-private-client (required, client identifier valid at the Platform)

scope: openid (required, must contain the openid scope value)

state: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IktOV0dpWWVnSmNCZDVDaDhsVTJFbHZTT1daN0t0NnZ5eVQwVWMydFFuRTAiLCJ0eXAiOiJKV1QifQ.eyJ0b29sX2lkIjozNzY3LCJzdGF0ZV9ub25jZSI6ImUyMTkxZWMxMTYzZGU3ZmY4NzU1IiwicGFyYW1zIjp7ImNvbnRyb2xsZXIiOiJsdGkvbG9naW5faW5pdGlhdGlvbnMiLCJhY3Rpb24iOiJpbmRleCIsInRvb2xfaWQiOiIzNzY3In0sImlzcyI6ImludGVncmF0aW9uLTU1Iiwic3ViIjoibXktcHJpdmF0ZS1jbGllbnQiLCJhdWQiOiJodHRwczovL2x0aS1yaS5pbXNnbG9iYWwub3JnL3BsYXRmb3Jtcy80MTEzL2FjY2Vzc190b2tlbnMiLCJpYXQiOjE3OTQwMTQ3MDMsImV4cCI6MTc5NDAxNTAwMywianRpIjoiYTQwNDRlZDgwZDExMjNiZmZkYzYifQ.LRcRkCrS2iI4Y50Hx7C3V7rbnqbDkzKaUHCEBvHC2cdExHJ8Ugxn1Vb0AVd0DRf1s2nsMNMTGMJELsJVlLlJ48UOaFBVKddNxAAFnAraFnu9sfdqLSNYdc5ZANN17Fqo1Q9o-4ydb6NghAGBgvbv2fo4F36gCTaNIzYk7SurjobqPjAH-3pd7nJKJju4zaNgatw0bXPA3rPkBUFGu-oN8pDjkK5i0y1YSKpO0V2ChbOAsJ-9FHlvgeUNSgrwu7SbPXq4YNImy9Kr7_Y344Hce4McjP9jZO88Nl0PyC0iLwNCeRWwXofCXPdXfINjQoPklyxYjzGYu626GlhgEYQ6OQ (required, opaque value used to maintain state between the request and the callback)

login_hint: (required, tools and platforms must support a value of form_post)

lti_message_hint: (required, a platform opaque identifier identifying the user to login)

prompt: none (optional, The tool should use a value of none. In the future a re-launch flow may support additional values being used here)

nonce: e2191ec1163de7ff8755 (optional, string value used to associate a client session with an ID token, and to mitigate replay attacks)