OMG! Sorry, I just found it. There is a setting for auth method in LTI provider general settings.

/admin/settings.php?section=local_ltiprovider