Labster · Authentication Profile

Labster Authentication

Authentication

Labster secures its APIs with openIdConnect, oauth2, and password across 5 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials and jwtBearer flow(s).

CompanyEducationEdTechVirtual LabsScience EducationSTEMSimulationLearning Management SystemLTIHigher Education

Methods: openIdConnect, oauth2, password Schemes: 5 OAuth flows: clientCredentials, jwtBearer API key in:

Security Schemes

LTI 1.3 launch openIdConnect

Clever SSO openIdConnect

Labster account login password

· in: https://my.labster.com/ ()

OAuth2 client credentials (internal) oauth2

JWT Bearer grant (internal) oauth2

Source

Authentication Profile

generated: '2026-07-19'
method: searched
source: https://help.labster.com/en/collections/3094279-lms-integration-for-lms-admin
docs: https://help.labster.com/en/collections/681668-access-to-labster
note: >-
  Derived from documentation rather than an OpenAPI securitySchemes block, because
  Labster ships no public API. Authentication here describes how users and LMS
  platforms authenticate into the Labster product surface.
summary:
  types:
  - openIdConnect
  - oauth2
  - password
  api_key_in: []
  oauth2_flows:
  - clientCredentials
  - jwtBearer
  public_api: false
schemes:
- name: LTI 1.3 launch
  type: openIdConnect
  standard: 1EdTech LTI 1.3
  description: >-
    Primary institutional integration. The LMS registers Labster as an LTI 1.3
    tool using a developer key / client ID, and launches students into Labster via
    the OIDC third-party-initiated login flow. Endpoint configuration (tool JSON
    URL, client ID) is issued per customer by a Labster Customer Success Manager
    and is not published publicly.
  platforms:
  - Canvas
  - Blackboard
  - Blackboard Ultra
  - Moodle
  - D2L Brightspace
  - Sakai
  - Schoology
  docs: https://help.labster.com/en/collections/3094279-lms-integration-for-lms-admin
- name: Clever SSO
  type: openIdConnect
  description: >-
    District users authenticate through their Clever Portal and are redirected
    into the Labster Course Manager. Identity is matched on the student email
    address linked to the Clever account. Rostering / Clever Secure Sync is not
    documented; instructors invite students by email.
  docs: https://help.labster.com/en/articles/11971470-accessing-labster-through-labster-s-clever-integration
- name: Labster account login
  type: password
  in: https://my.labster.com/
  description: Direct email/password sign-in to the Labster course manager.
- name: OAuth2 client credentials (internal)
  type: oauth2
  flow: clientCredentials
  description: >-
    Service-to-service authentication between Labster's own backend services, as
    implemented in the open-source Livit/Labster.OAuth2Client library. Not exposed
    to third-party developers.
  source: https://github.com/Livit/Labster.OAuth2Client
- name: JWT Bearer grant (internal)
  type: oauth2
  flow: jwtBearer
  standard: RFC 7523
  description: >-
    Used by Labster for communication with Salesforce, per the Labster.OAuth2Client
    documentation. Not exposed to third-party developers.
  source: https://github.com/Livit/Labster.OAuth2Client

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/labster-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.