\label{Modify_Course_LTI_Authen}

When a deeplink parameter is set in a course for a specific resource or folder, one of the options is to restrict access to launch from another learning management system.  In that situation the other system is a Learning Tool Interoperability (LTI) Consumer, while LON-CAPA is an LTI Provider.

The signed payload included with the Consumer's launch request can include the username of the authenticated user who followed the link in the Consumer system.  Whether such a username will be accepted, and a session launched for that username in LON-CAPA, or whether the user will be prompted to log-in to LON-CAPA in order to access the deep-linked resource(s) depends on the "Use identity" setting in effect for the current course.

A default value for ``Student username in LTI launch accepted without re-authentication'' is set by a Domain Coordinator in the ``Course/Community defaults'' component in the domain configuration.

A Domain Coordinator can also choose to override the domain default on a course-by-course basis by checking ``Use course-specific setting'' in the ``Requirement for re-authentication for LTI launch of deep-linked item'' menu.