This page covers everything an administrator needs to verify before deploying Tosa certification testing in their institution, and how to connect the Tosa testing environment to your existing systems via API or LTI.
System Requirements
Supported Operating Systems
| Operating System | Minimum Version |
|---|---|
| Windows | Windows 10 and up |
| macOS | macOS 11 (Big Sur) and up |
| Chrome OS | Chrome OS 110 and up |
Supported Browsers
| Browser | Minimum Version / Notes |
|---|---|
| Google Chrome | Version 110 and up (recommended) |
| Mozilla Firefox | Version 110 and up — disable Private/Incognito mode |
Minimum Bandwidth
1 Mbps upload and download per student. Check available bandwidth at: www.speedtest.net
Minimum CPU Performance
Test student device performance using Octane 2.0 (run from the student's Chrome browser):
| Octane 2.0 Benchmark | Minimum Recommended Score |
|---|---|
| Standard Tosa certification | 25,000 |
| Remote-proctored Tosa certification (Integrity Advocate) | 30,000 |
Network Configuration
Domains to Whitelist
The following domains must be accessible from all student and administrator devices. Please add them to your firewall or content filtering allowlist:
| Domain | Notes |
|---|---|
*.isograd.com | All isograd.com subdomains — the * wildcard covers all required subdomains |
tosa.org | Tosa certification environment |
googleapis.com | Required for platform functionality |
gstatic.com | Required for platform functionality |
If your firewall does not support wildcard entries, whitelist these individual subdomains instead: app.isograd.com, learning.isograd.com, learning-resources.isograd.com, staticacm.isograd.com
Protocol
WSS protocol (WebSockets Secure) on port 443 must be open.
Google Workspace Permissions
For Tosa subjects based on Google Suite (Google Docs, Sheets, Slides), file sharing via Google Drive must be enabled for the domain isograd.com. To configure this:
- In your Google Admin Console, go to Apps > Google Workspace > Drive and Docs > Sharing settings
- Under Sharing outside your organization, click Allowlisted Domains and add
isograd.com - Enable the option: "Allow users in your organization to receive files from users outside of allowlisted domains"
Reference: Manage external sharing for your organization (see Step 5, section "Allow external sharing with only certain domains")
API & LTI Integration
The Tosa testing environment integrates with all major Learning Management Systems (LMS) and Student Information Systems (SIS) through both LTI and a RESTful API. This enables:
- Single Sign-On for candidates and administrators
- Automated candidate creation and roster synchronization
- Programmatic test assignment and result retrieval
LTI Integration
The Tosa testing environment is compatible with LTI 1.1 and LTI 1.3. To connect your LMS, configure Isograd as an External Tool in your LMS with the credentials (client key and client secret) provided by the Isograd team upon request.
| Environment | LTI Endpoint URL |
|---|---|
| Testing / Staging | https://recette.isograd.com/public/lti.php |
| Production | https://app.isograd.com/public/lti.php |
API Integration
The Isograd API uses OAuth 2.0 for authentication. Request your client_id and client_secret from the Isograd team, then retrieve an access token from:
POST https://auth.isograd.com/oauth2/token?grant_type=client_credentials&scopes=usage
Available API actions include: candidate creation, test assignment, result retrieval (PDF and JSON), session management, and administrative login.
Full API and LTI documentation: Isograd Developers Documentation
Contact support@isograd.com to request your API credentials or LTI configuration details.
For technical support or questions about setup and integration, contact the Isograd team at support@isograd.com or visit our Contact page.