Imperial Canvas LTI 1.3 / OIDC Platform Endpoints
Imperial's Canvas tenancy publishes the two documents an LTI 1.3 tool integrator actually needs, unauthenticated, on Imperial's own hostname: an LTI platform JWKS at /api/lti/security/jwks (200, 1,408 bytes of RSA public keys used to verify launch id_tokens), and an OIDC discovery document at /.well-known/openid-configuration (200, issuer https://canvas.imperial.ac.uk, RS256, authorization_code). The Canvas REST API itself is present but gated — /api/v1/accounts/self answers 401 "user authorisation required". No SCIM surface is exposed. This is the closest thing Imperial has to a documented, standards-conformant integration point, and it is Instructure's work.