Integrations - SAML, WordPress, Arlo, SCORM, Zapier, Open API

This article covers the integrations available in Coursebox: SAML single sign-on, the WordPress/WooCommerce plugin, Arlo sync, SCORM imports, the Open API, and Zapier automation.

SAML single sign-on (SSO)

Coursebox supports SAML 2.0-based Single Sign-On (SSO), allowing users to authenticate using their existing organisation credentials. This provides a secure and seamless login experience for learners, admins, and facilitators — particularly within enterprise or institutional environments.

SSO is configured by the Coursebox team together with your IT department. To start, contact support@coursebox.ai and we will send you the Coursebox SP metadata and a sample of the SAML token claims we expect from your identity provider.

What your identity provider needs to supply

1. SAML IdP metadata in XML format

2. A sample SAML token containing all the user claims your IdP will generate

3. A test user for each group

WordPress plugin integration with WooCommerce

The Coursebox WooCommerce Plugin seamlessly connects your Coursebox account with your online store, making it easy to sell your existing courses directly through WooCommerce.

With this integration, your courses can be listed as products in your store, and customers are automatically enrolled in the correct course as soon as they complete their purchase. No more manual enrollments — saving you time and simplifying your workflow.

This integration lets you combine Coursebox’s powerful AI-driven course creation and management features with the flexibility of WooCommerce, giving you full control over sales, enrollments, and the customer experience.

Quick start guide – Coursebox WooCommerce plugin

Step 1: Install & Activate

• Upload the plugin files to /wp-content/plugins/course-box or install it directly from the WordPress Plugins screen.

• Go to Plugins → Installed Plugins and click Activate.

• Make sure WooCommerce is installed and active.

Step 2: Connect to Coursebox

1. In Coursebox, click the dropdown (▼) next to your profile icon and select Settings.

2. In the left-hand menu, click Integrations and, under Open API, copy your API Key.

3. In WordPress, go to Course Box → Settings and enter your API URL and API Key.

4. The API URL must be the root domain of your Coursebox portal (for example, my.coursebox.ai users enter https://my.coursebox.ai). Once you save, the status changes to Configured and Active.

Step 3: Import Your Courses

Go to Course Box → Import Courses. You’ll see your Coursebox courses with their images, descriptions and import options. Click Import Course to bring a course into your WooCommerce store.

Step 4: Publish Your Courses

Once imported, each course is listed as a WooCommerce product. You can adjust pricing, categories, and tags directly in WooCommerce, just like any other product. Customers can then add courses to their cart and purchase as usual.

Sync Arlo

A Super Admin can sync an Arlo account with a Coursebox branded training platform by providing Arlo’s login URL and credentials.

Importing a SCORM file

Importing SCORM is useful for including simulations, branching scenarios, or assessments built in third-party tools while keeping everything accessible within your Coursebox course. Using SCORM you can create a highly interactive course which takes advantage of all the HTML5 features. SCORM import requires Pro and above.

The steps are:

• Prepare your SCORM package. Ensure your SCORM file is a zipped package (.zip) and compatible with SCORM 1.2 or SCORM 2004 standards.

• Navigate to the course where you want to add the SCORM content.

• Click + Add block and, under Multimedia, choose SCORM.

• Click Upload File, then select your SCORM .zip file from your computer.

Coursebox Open API

The Coursebox API allows enterprise clients and training organisations to automate learner management, integrate course data into other platforms (like CRMs, HR systems, or ERPs), and build custom user experiences. It is an add-on on Pro + LMS, and included on Enterprise.

Authentication

Login: Authenticate users with their email and password to receive an access token.

Endpoint:

POST /auth/login

Headers:

Content-Type: application/json

Request Body:

{
    "email": "<email>",
    "password": "<password>"
}

Response: Returns an access token for authenticated requests in the token:id parameter.

Register a new user

Create a new Coursebox user.

Endpoint:

POST /api/wineusers/createAccount

Headers:

X-Access-Token: <access_token>

Request Body:

{
    "data": {
        "user": {
            "firstName": "<firstname>",
            "lastName": "<lastname>",
            "email": "<email>",
            "password": "<password>"
        },
        "offerCode": "",
        "marketingEmails": true,
        "is18Plus": true
    }
}

Retrieve user details

Fetch user information by their ID.

Endpoint:

GET /api/WineUsers/<userid>

Headers:

X-Access-Token: <access_token>

Edit user details

Edit a Coursebox user.

Endpoint:

POST /api/WineUsers/updateMainAttributes?id=<userid>

Headers:

X-Access-Token: <access_token>

Request Body:

{
    "id": <userid>,
  "attributes": {
    "realm": <realm>,
    "email": <email>,
    "emailVerified": <emailVerified>,
    "fullName": <fullName>,
    "firstName": <firstName>,
    "lastName": <lastName>,
    "title": <title>,
    "contactNumber": <contactNumber>,
    "dateOfBirth": <dateOfBirth>,
    "headline": <headline>,
    "avatarUrl": <avatarUrl>,
    "profile": {
      "background": <background>
    },
    "country": <country>,
    "city": <city>,
    "location": <location>,
    "region": <region>,
    "state": <state>,
    "zipCode": <zipCode>,
    "status": [<status>],
    "rate": <rate>,
    "rateAdditionalTax": <rateAdditionalTax>,
    "price": <price>,
    "currency": <currency>,
    "additionalTax": <additionalTax>,
    "isDiscountCodeUsed": <isDiscountCodeUsed>,
    "calendlyLink": <calendlyLink>,
    "personalSite": <personalSite>,
    "companySite": <companySite>,
    "linkedIn": <linkedIn>,
    "twitter": <twitter>,
    "facebookLink": <facebookLink>,
    "instagramLink": <instagramLink>,
    "facebookId": <facebookId>,
    "googleId": <googleId>,
    "linkedinId": <linkedinId>,
    "appleId": <appleId>,
    "customerId": <customerId>,
    "stripeId": <stripeId>,
    "isDeleted": <isDeleted>,
    "isPlatformUpdates": <isPlatformUpdates>,
    "isAdmin": <isAdmin>,
    "isExpertRequested": <isExpertRequested>,
    "isExpertApproved": <isExpertApproved>,
    "organisationCode": <organisationCode>,
    "isVIPRequested": <isVIPRequested>,
    "isVIPApproved": <isVIPApproved>,
    "isChannelPublished": <isChannelPublished>,
    "isCoursePublished": <isCoursePublished>,
    "newEmail": <newEmail>,
    "isSideBarVisible": <isSideBarVisible>,
    "isTopBarVisible": <isTopBarVisible>,
    "channelsPageTabs": <channelsPageTabs>,
    "peoplePageTabs": <peoplePageTabs>,
    "elibraryPageTabs": <elibraryPageTabs>,
    "resourcesPageTabs": <resourcesPageTabs>,
    "lastActiveAt": <lastActiveAt>,
    "isInActive": <isInActive>,
    "isTrial": <isTrial>,
    "inIframe": <inIframe>,
    "referer": <referer>,
    "username": <username>,
    "credentials": <credentials>,
    "challenges": <challenges>,
    "created": <created>,
    "lastUpdated": <lastUpdated>,
    "id": <id>,
    "createdAt": <createdAt>,
    "updatedAt": <updatedAt>,
    "isUserAdmin": <isUserAdmin>,
    "isVIP": <isVIP>,
    "isBoxer": <isBoxer>,
    "isPro": <isPro>,
    "isApprovedExpert": <isApprovedExpert>,
    "isExpert": <isExpert>,
    "isLearner": <isLearner>,
    "isFollowed": <isFollowed>
  }
}

Invite a user to a course

Send an invitation for a user to join a course.

Endpoint:

POST /api/Courses/inviteUserForCourse

Headers:

X-Access-Token: <access_token>

Request Body:

{
    "data": {
        "firstName": "<firstname>",
        "lastName": "<lastname>",
        "courseid": <courseid>,
        "email": "<email>"
    },
    "courseId": <courseid>,
    "title": "",
    "body": ""
}

Enrol a user in a course

Add a user to a specific course.

Endpoint:

POST /api/Courses/<courseid>/enrolUser

Headers:

X-Access-Token: <access_token>

Request Body:

{
    "id": <courseid>,
    "userId": <userid>
}

Remove a user from a course

Unenrol a user from a course.

Endpoint:

 DELETE /api/Courses/<courseid>/users?userid=<userid>

Headers:

X-Access-Token: <access_token>

Retrieve available courses

Fetch a list of available courses.

Endpoint:

GET /api/Courses/findCourses?pageOptions={"my":true}

Headers:

X-Access-Token: <access_token>

Retrieve course details

Fetch details of a specific course.

Endpoint:

GET /api/Courses/findCourse?id=<courseid>

Headers:

X-Access-Token: <access_token>

Get course content

Retrieve content for a specific course page.

Endpoint:

GET /api/Activities/<activityId>

Headers:

X-Access-Token: <access_token>

Get course learners

Retrieve a list of learners enrolled in a course.

Endpoint:

GET /api/Courses/<courseid>/allLearners

Headers:

X-Access-Token: <access_token>

Get course administrators

Retrieve a list of course administrators.

Endpoint:

GET /api/WineUsers/getUserForMentio?params={"all":true,"ids":"<courseid>"}

Headers:

X-Access-Token: <access_token>

Error handling

The Coursebox API returns standard HTTP status codes:

• 200 OK – Request successful

• 400 Bad Request – Invalid request

• 401 Unauthorized – Invalid authentication token

• 404 Not Found – Resource not found

• 500 Internal Server Error – Issue on the server side

Best practices

• Always use HTTPS and manage secrets securely.

• Limit token lifespan for security.

• Add rate limiting logic on your system if building public interfaces.

API FAQs

Can I use this API to push results or assessments?
Not in this version. For advanced LTI or webhook support, contact your Coursebox rep or book a call.

Can I access this via Zapier?
Yes — see the Zapier section below, or the Coursebox LMS integrations page on Zapier.

Zapier automation

Zapier allows you to connect Coursebox with hundreds of other applications to automate tasks such as enrolling users, updating profiles, and tracking completions — without writing any code.

Access your Open API key

To connect Coursebox with Zapier, you’ll need your API Key.

• Log in as a Super Admin.

• Go to Settings → Integrations and find the Open API section.

• Copy the displayed API Key for use in Zapier. The screenshot in the WooCommerce section above shows where it is.

• If needed, click Reset API Key to generate a new one.

Open the Zapier integration

• Open your course and click the Share button (top right of the course editor) to open the Share panel.

• Click See all, then click Zapier.

• You’ll be directed to the Coursebox LMS Integrations page on Zapier.

• Sign in or create a Zapier account using email or Google login.

Connect Coursebox to Zapier

When setting up a Zap with Coursebox, you’ll be prompted to connect your Coursebox account.
This connection allows Zapier to communicate securely with your learning platform and perform actions automatically.

• In Zapier, select Coursebox LMS as your app.

• When prompted, enter the following:

  • API Key – found in Settings → Integrations, under Open API.

  • Coursebox Domain – your portal’s URL (e.g., https://my.coursebox.ai).

• Click Continue to authorise the connection.

You can reset your API Key at any time to generate a new one.
This adds an extra layer of security and ensures your integrations remain private and protected.

Coursebox trigger options

These triggers start your Zaps when specific events occur in Coursebox:

Coursebox action options

These are the actions Zapier can perform inside Coursebox after a trigger occurs:

Popular Zapier use cases

These examples assume Coursebox is already connected in Zapier using your API Key (Settings → Integrations → Open API) and your Coursebox Domain (e.g. https://yourportal.coursebox.ai).

Mapping the User field to a previous step

When enrolling someone into a course, event, channel or resource, the User field shows a list of existing names — that is a static selector. You almost always want it to map to the user created or invited earlier in the same workflow instead.

• Do not choose a static name from the dropdown.

• In Zapier: click the Custom tab (or "Insert data"), then choose the User ID output from your Invite User step.

• In Make (Integromat): click the { } / Add variable icon next to the field and select the User ID from Invite User.

• Leave the Course, Event or Channel field set to your chosen item.

• Test the workflow with a sample record. It should create or invite the user (returning a User ID), then enrol that same user.

Which value to map:

1. user.id — best practice. Often labelled User ID or Coursebox User ID.

2. Email — fallback option; the enrol action accepts email in most versions of the Coursebox app.

If Zapier or Make doesn’t show fresh outputs, re-run Test on the Invite User step to pull a new sample.

Let admins manage Zapier (optional)

To let users with the Admin role create and manage Zapier integrations for the whole portal, turn on the Approved Admins switch in Settings → Integrations. It is off by default.

Hide the user counter on the login page

On the login page, Coursebox displays the number of users in your community. If you prefer not to show this number, you can hide it.

• Go to Settings → Users and registration.

• Tick Hide user counter.

• When it is ticked, the user count doesn’t appear on the login page.