We are using “Published as LTI tools" feature on a course. When using the Safari browser (version 14.1.2.) with "Prevent cross-site tracking" enabled and accessing the course activities from within the external system we are prompted for login details but still can't access the content as we are again prompted for login details. In the external system, we set the content to open in a new window but this did not solve the problem.
When we disable "Prevent cross-site tracking" in Safari, it works ok: We are not prompted for login details and can access the content published as LTI tools ok.
I noticed in https://tracker.moodle.org/browse/MOBILE-3724 (Fix LTI 1.3 launch in the app) that the first testing step is:
- Before testing this in iOS, please go to iOS native settings, select Safari and then disable "Prevent Cross-Site Tracking".
Does this mean there is no way to code around the "Prevent cross-site tracking" in Safari or is this a bug? E.g. I was wondering whether adding SameSite=None to the cookies might do the trick?
Thanks,
Barry