Right now, connecting an external application to itslearning requires an organization-wide Application Key/Shared Secret that only a school's system administrator can set up (Organisation API / REST API for Applications). This works for institution-level integrations, but it's not practical or appropriate for an individual student or teacher who just wants to connect a small personal tool (e.g. a calendar app, a study assistant, or an AI assistant) to their own account.

It would be very useful to have a personal, OAuth2-based authorization flow, similar to "Sign in with Google/Microsoft", where an individual user logs in and grants a specific app read-only access limited strictly to their own data, for example their own messages, course updates, and assignments/tasks, without exposing any data belonging to other users, and without requiring the school to set up organization-wide credentials.

This would benefit any student, teacher, or parent who wants to use or build their own small tools without involving the school's IT department, while keeping access properly scoped and privacy-friendly, since each user could only ever see and share their own data.