Integrations - SAML, WordPress, Arlo, SCORM, Zapier, Open API

This article covers the integrations available in Coursebox: SAML single sign-on, the WordPress/WooCommerce plugin, Arlo sync, SCORM imports, the Open API, and Zapier automation.

SAML single sign-on (SSO)

Coursebox supports SAML 2.0-based Single Sign-On (SSO), allowing users to authenticate using their existing organisation credentials. This provides a secure and seamless login experience for learners, admins, and facilitators — particularly within enterprise or institutional environments.

SSO is configured by the Coursebox team together with your IT department. To start, contact support@coursebox.ai and we will send you the Coursebox SP metadata and a sample of the SAML token claims we expect from your identity provider.

What your identity provider needs to supply

1. SAML IdP metadata in XML format

2. A sample SAML token containing all the user claims your IdP will generate

3. A test user for each group

WordPress plugin integration with WooCommerce

The Coursebox WooCommerce Plugin seamlessly connects your Coursebox account with your online store, making it easy to sell your existing courses directly through WooCommerce.

With this integration, your courses can be listed as products in your store, and customers are automatically enrolled in the correct course as soon as they complete their purchase. No more manual enrollments — saving you time and simplifying your workflow.

This integration lets you combine Coursebox’s powerful AI-driven course creation and management features with the flexibility of WooCommerce, giving you full control over sales, enrollments, and the customer experience.

Quick start guide – Coursebox WooCommerce plugin

Step 1: Install & Activate

• Upload the plugin files to /wp-content/plugins/course-box or install it directly from the WordPress Plugins screen.

• Go to Plugins → Installed Plugins and click Activate.

• Make sure WooCommerce is installed and active.

Step 2: Connect to Coursebox

• Go to Course Box → Settings

• Get your API URL and API Key.

• Go to WordPress and enter the API URL and API Key to connect to your Coursebox account.

• The API Base URL must be the root domain of your Coursebox portal (for example, marketplace users should enter https://my.coursebox.ai). Once saved, the status will update to "Configured" and "Active."

Step 3: Import Your Courses

Navigate to Course Box → Import Courses. Here, you’ll see all your available Coursebox courses with images, descriptions, and import options. Simply click Import Course to bring a course into your WooCommerce store.

Step 4: Publish Your Courses

Once imported, each course is listed as a WooCommerce product. You can adjust pricing, categories, and tags directly in WooCommerce, just like any other product. Customers can then add courses to their cart and purchase as usual.

Sync Arlo

A Super Admin can sync an Arlo account with a Coursebox branded training platform by providing Arlo’s login URL and credentials.

Importing a SCORM file

Importing SCORM is useful for including simulations, branching scenarios, or assessments built in third-party tools while keeping everything accessible within your Coursebox course. Using SCORM you can create a highly interactive course which takes advantage of all the HTML5 features.

The steps are:

• Prepare your SCORM package. Ensure your SCORM file is a zipped package (.zip) and compatible with SCORM 1.2 or SCORM 2004 standards.

• Navigate to the course where you want to add the SCORM content.

• Select SCORM from the menu.

• Click Upload File, then select your SCORM .zip file from your computer.

Coursebox Open API

The Coursebox API allows enterprise clients and training organisations to automate learner management, integrate course data into other platforms (like CRMs, HR systems, or ERPs), and build custom user experiences. It requires Pro + LMS or Enterprise and the API add-on.

Authentication

Login: Authenticate users with their email and password to receive an access token.

Endpoint:

POST /auth/login

Headers:

Content-Type: application/json

Request Body:

{
    "email": "<email>",
    "password": "<password>"
}

Response: Returns an access token for authenticated requests in

token:id parameter.

Register a new user

Create a new Coursebox user.

Endpoint:

POST /api/wineusers/createAccount

Headers:

X-Access-Token: <access_token>

Request Body:

{
    "data": {
        "user": {
            "firstName": "<firstname>",
            "lastName": "<lastname>",
            "email": "<email>",
            "password": "<password>"
        },
        "offerCode": "",
        "marketingEmails": true,
        "is18Plus": true
    }
}

Retrieve user details

Fetch user information by their ID.

Endpoint:

GET /api/WineUsers/<userid>

Headers:

X-Access-Token: <access_token>

Edit user details

Edit a Coursebox user.

Endpoint:

POST /api/WineUsers/updateMainAttributes?id=<userid>

Headers:

X-Access-Token: <access_token>

Request Body:

{
    "id": <userid>,
  "attributes": {
    "realm": <realm>,
    "email": <email>,
    "emailVerified": <emailVerified>,
    "fullName": <fullName>,
    "firstName": <firstName>,
    "lastName": <lastName>,
    "title": <title>,
    "contactNumber": <contactNumber>,
    "dateOfBirth": <dateOfBirth>,
    "headline": <headline>,
    "avatarUrl": <avatarUrl>,
    "profile": {
      "background": <background>
    },
    "country": <country>,
    "city": <city>,
    "location": <location>,
    "region": <region>,
    "state": <state>,
    "zipCode": <zipCode>,
    "status": [<status>],
    "rate": <rate>,
    "rateAdditionalTax": <rateAdditionalTax>,
    "price": <price>,
    "currency": <currency>,
    "additionalTax": <additionalTax>,
    "isDiscountCodeUsed": <isDiscountCodeUsed>,
    "calendlyLink": <calendlyLink>,
    "personalSite": <personalSite>,
    "companySite": <companySite>,
    "linkedIn": <linkedIn>,
    "twitter": <twitter>,
    "facebookLink": <facebookLink>,
    "instagramLink": <instagramLink>,
    "facebookId": <facebookId>,
    "googleId": <googleId>,
    "linkedinId": <linkedinId>,
    "appleId": <appleId>,
    "customerId": <customerId>,
    "stripeId": <stripeId>,
    "isDeleted": <isDeleted>,
    "isPlatformUpdates": <isPlatformUpdates>,
    "isAdmin": <isAdmin>,
    "isExpertRequested": <isExpertRequested>,
    "isExpertApproved": <isExpertApproved>,
    "organisationCode": <organisationCode>,
    "isVIPRequested": <isVIPRequested>,
    "isVIPApproved": <isVIPApproved>,
    "isChannelPublished": <isChannelPublished>,
    "isCoursePublished": <isCoursePublished>,
    "newEmail": <newEmail>,
    "isSideBarVisible": <isSideBarVisible>,
    "isTopBarVisible": <isTopBarVisible>,
    "channelsPageTabs": <channelsPageTabs>,
    "peoplePageTabs": <peoplePageTabs>,
    "elibraryPageTabs": <elibraryPageTabs>,
    "resourcesPageTabs": <resourcesPageTabs>,
    "lastActiveAt": <lastActiveAt>,
    "isInActive": <isInActive>,
    "isTrial": <isTrial>,
    "inIframe": <inIframe>,
    "referer": <referer>,
    "username": <username>,
    "credentials": <credentials>,
    "challenges": <challenges>,
    "created": <created>,
    "lastUpdated": <lastUpdated>,
    "id": <id>,
    "createdAt": <createdAt>,
    "updatedAt": <updatedAt>,
    "isUserAdmin": <isUserAdmin>,
    "isVIP": <isVIP>,
    "isBoxer": <isBoxer>,
    "isPro": <isPro>,
    "isApprovedExpert": <isApprovedExpert>,
    "isExpert": <isExpert>,
    "isLearner": <isLearner>,
    "isFollowed": <isFollowed>
  }
}

Invite a user to a course

Send an invitation for a user to join a course.

Endpoint:

POST /api/Courses/inviteUserForCourse

Headers:

X-Access-Token: <access_token>

Request Body:

{
    "data": {
        "firstName": "<firstname>",
        "lastName": "<lastname>",
        "courseid": <courseid>,
        "email": "<email>"
    },
    "courseId": <courseid>,
    "title": "",
    "body": ""
}

Enrol a user in a course

Add a user to a specific course.

Endpoint:

POST /api/Courses/<courseid>/enrolUser

Headers:

X-Access-Token: <access_token>

Request Body:

{
    "id": <courseid>,
    "userId": <userid>
}

Remove a user from a course

Unenrol a user from a course.

Endpoint:

 DELETE /api/Courses/<courseid>/users?userid=<userid>

Headers:

X-Access-Token: <access_token>

Retrieve available courses

Fetch a list of available courses.

Endpoint:

GET /api/Courses/findCourses?pageOptions={"my":true}

Headers:

X-Access-Token: <access_token>

Retrieve course details

Fetch details of a specific course.

Endpoint:

GET /api/Courses/findCourse?id=<courseid>

Headers:

X-Access-Token: <access_token>

Get course content

Retrieve content for a specific course page.

Endpoint:

GET /api/Activities/<activityId>

Headers:

X-Access-Token: <access_token>

Get course learners

Retrieve a list of learners enrolled in a course.

Endpoint:

GET /api/Courses/<courseid>/allLearners

Headers:

X-Access-Token: <access_token>

Get course administrators

Retrieve a list of course administrators.

Endpoint:

GET /api/WineUsers/getUserForMentio?params={"all":true,"ids":"<courseid>"}

Headers:

X-Access-Token: <access_token>

Error handling

The Coursebox API returns standard HTTP status codes:

• 200 OK – Request successful

• 400 Bad Request – Invalid request

• 401 Unauthorized – Invalid authentication token

• 404 Not Found – Resource not found

• 500 Internal Server Error – Issue on the server side

Best practices

• Always use HTTPS and manage secrets securely.

• Limit token lifespan for security.

• Add rate limiting logic on your system if building public interfaces.

API FAQs

Can I use this API to push results or assessments?
Not in this version. Please contact your Coursebox rep for advanced LTI or webhook support.

Can I access this via Zapier?
Yes — see the Zapier section below, or the Coursebox LMS integrations page on Zapier.

Zapier automation

Zapier allows you to connect Coursebox with hundreds of other applications to automate tasks such as enrolling users, updating profiles, and tracking completions — without writing any code.

Access your Open API key

To connect Coursebox with Zapier, you’ll need your API Key.

• Log in as a Super Admin.

• Go to Settings → Open API.

• Copy the displayed API Key for use in Zapier.

• If needed, click Reset API Key to generate a new one.

Open the Zapier integration

• Open your course and click the Share button (top right of the course editor) to open the Share panel.

• Select the Zapier icon located below the sharing options.

• You’ll be directed to the Coursebox LMS Integrations page on Zapier.

• Sign in or create a Zapier account using email or Google login.

Connect Coursebox to Zapier

When setting up a Zap with Coursebox, you’ll be prompted to connect your Coursebox account.
This connection allows Zapier to communicate securely with your learning platform and perform actions automatically.

• In Zapier, select Coursebox LMS as your app.

• When prompted, enter the following:

  • API Key – found in your Coursebox Settings → Open API section.

  • Coursebox Domain – your portal’s URL (e.g., https://my.coursebox.ai).

• Click Continue to authorise the connection.

You can reset your API Key at any time to generate a new one.
This adds an extra layer of security and ensures your integrations remain private and protected.

Coursebox trigger options

These triggers start your Zaps when specific events occur in Coursebox:

Coursebox action options

These are the actions Zapier can perform inside Coursebox after a trigger occurs:

Popular Zapier use cases

These examples assume Coursebox is already connected in Zapier using your API Key (Settings → Open API) and your Coursebox Domain (e.g. https://yourportal.coursebox.ai).

Mapping the User field to a previous step

When enrolling someone into a course, event, channel or resource, the User field shows a list of existing names — that is a static selector. You almost always want it to map to the user created or invited earlier in the same workflow instead.

• Do not choose a static name from the dropdown.

• In Zapier: click the Custom tab (or "Insert data"), then choose the User ID output from your Invite User step.

• In Make (Integromat): click the { } / Add variable icon next to the field and select the User ID from Invite User.

• Leave the Course, Event or Channel field set to your chosen item.

• Test the workflow with a sample record. It should create or invite the user (returning a User ID), then enrol that same user.

Which value to map:

1. user.id — best practice. Often labelled User ID or Coursebox User ID.

2. Email — fallback option; the enrol action accepts email in most versions of the Coursebox app.

If Zapier or Make doesn’t show fresh outputs, re-run Test on the Invite User step to pull a new sample.

Allow expert access (optional)

If you’d like specific team members to access integrations, turn on Approved Experts under your settings.

Hide the user counter on the login page

On the login page, Coursebox displays the number of users in your community. If you prefer not to show this number, you can hide it.

• Find the option Hide user counter.

• Toggle to ON to hide the counter.

• When enabled, the user count will no longer appear on the login page.