# LTI 1.3 Deep Linking Integration with UbiCast – 404 Error Despite Correct Session/Cookie Setup

**URL:** <https://discuss.openedx.org/t/lti-1-3-deep-linking-integration-with-ubicast-404-error-despite-correct-session-cookie-setup/16377>\
**Category:** Site Operations Help\
**Tags:** api, how-to, devstack, tutor, lti\
**Created:** [June 24, 2025, 8:03am UTC](https://discuss.openedx.org/t/lti-1-3-deep-linking-integration-with-ubicast-404-error-despite-correct-session-cookie-setup/16377 "2025-06-24T08:03:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ronak\_Pansuriya1](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/ronak_pansuriya1/32/6909_2.png) [@Ronak\_Pansuriya1](https://discuss.openedx.org/u/Ronak_Pansuriya1)\
**Post date:** [June 24, 2025, 8:03am UTC](https://discuss.openedx.org/t/lti-1-3-deep-linking-integration-with-ubicast-404-error-despite-correct-session-cookie-setup/16377/1 "2025-06-24T08:03:30Z")

</div>

**Hello community,**

We’re working on integrating **UbiCast** using **LTI 1.3 Deep Linking** into our Open edX platform, but the key deep linking workflow is not working.

The request to the deep linking launch URL (`/lti/adv/launch/`) always returns a **404 Not Found** error. After checking the HAR file, it looks like the **session and CSRF cookies may not be included** in the request, possibly because the tool is launched inside an iframe.

According to the UbiCast team, the same integration works as expected in other platforms. so they suspect this could be a session or CSRF-related issue specific to Open edX.

we’ve already verified that the cookie/session settings are correctly configured:

- `SESSION_COOKIE_SAMESITE = "None"`
- `SESSION_COOKIE_SECURE = True`
- `CSRF_COOKIE_SAMESITE = "None"`
- `CSRF_COOKIE_SECURE = True`

We can also see the cookies being properly set in the browser’s DevTools.

If anyone has experience with LTI 1.3 Deep Linking in Open edX or has run into similar iframe-related session issues, we’d really appreciate your guidance.

---

<div class="post-metadata">

**Author:** ![sarina](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/sarina/32/2308_2.png) [@sarina](https://discuss.openedx.org/u/sarina)\
**Post date:** [June 25, 2025, 5:00pm UTC](https://discuss.openedx.org/t/lti-1-3-deep-linking-integration-with-ubicast-404-error-despite-correct-session-cookie-setup/16377/2 "2025-06-25T17:00:31Z")

</div>

Hi @mafermazu - would you be able to help with this?

@Ronak_Pansuriya1 I’ve recategorized your post to Site Operators, please ensure to pick a proper category when you post so the right eyes get on it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/openedx/original/2X/e/e0015f89e879bc75925b71fd11133ab15fe98297.png) [@system](https://discuss.openedx.org/u/system)\
**Post date:** [September 23, 2025, 5:01pm UTC](https://discuss.openedx.org/t/lti-1-3-deep-linking-integration-with-ubicast-404-error-despite-correct-session-cookie-setup/16377/3 "2025-09-23T17:01:28Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.