Learning Management System (Insurance) — Host-to-Host Integration

Purpose of Host-to-Host

Provide seamless SSO from agency/HR portals to LMS for mandatory and product trainings.
Synchronize users, roles, agent licensing status, enrollments, completions, and certificates.
Feed learning outcomes to CRM/PAS/HR for incentive eligibility and compliance reporting.

Core Data Objects

User: userId, name, email, role (agent/staff/partner), branch, license/KYC status
Course: id, title, category (compliance/product/skill), language, duration, credits (CE)
Module: SCORM/xAPI/HTML5, attempts, score, time spent, pass/fail
Enrollment: courseId, status (enrolled/in-progress/completed/expired), dueDate
Assessment: quiz/exam results, proctoring flags, retakes
Certificate: id, template, issueDate, expiry, verification hash/QR
Events: userSynced, enrolled, completed, certificateIssued

Example API Endpoints

POST /auth/sso
OIDC SSO (with roles & branch claims) from HR/Agency portals

POST /users/sync
Upsert users with roles, license/KYC status

POST /courses/publish
Publish/retire courses & versions (SCORM/xAPI)

POST /enrollments
Enroll users or groups; set due dates & reminders

GET /progress/{userId}
Return progress, scores, attempts by course

POST /certificates/issue
Issue certificate; return signed URL & QR hash

GET /certificates/verify/{hash}
Public endpoint to verify certificate

POST /callbacks/events
Webhook callbacks (enrolled/completed/certified)

Sample User Sync

POST /users/sync
{
  "userId":"AGT-70021",
  "name":"Rama Putra",
  "email":"rama@example.com",
  "roles":["Agent"],
  "branch":"Jakarta",
  "license":{"type":"General","expires":"2026-04-30"}
}

Sample Enrollment

POST /enrollments
{
  "userId":"AGT-70021",
  "courseId":"PROD-MOTOR-2025",
  "dueDate":"2025-09-15",
  "notify": true
}

Reference Flows

SSO & Provisioning

Portal triggers /auth/sso → user lands in LMS
HR/Agency posts /users/sync with roles & license
Group rules auto‑enroll mandatory courses

Training & Assessment

User takes modules (SCORM/xAPI/HTML5)
Scores & time tracked; proctoring flags (if enabled)
Completion triggers callbacks to CRM/HR

Certification & Verification

Upon completion → /certificates/issue
QR/Hash allows public verification
Expiry drives re‑enrollment reminders

Compliance Reporting

Daily feed to DW/BI with course completions
Eligibility flags sent to incentive/commission systems
Audit reports for regulators & partners

Security & Controls

mTLS for system‑to‑system; OAuth2/OIDC SSO; short‑lived tokens.
PII protection: encryption, masking, signed URLs for certificates.
Role/branch‑scoped permissions; maker‑checker for course changes.
Idempotency, anti‑replay, and rate limiting for callbacks.

Monitoring & Audit

Enrollment & completion funnels; overdue tracking.
Module error rates, SCORM/xAPI telemetry, latency.
Certificate verification logs & expiry dashboards.

What You Get

OpenAPI, Postman, and mock LMS environment.
Course templates (compliance/product/skill) and SCORM/xAPI examples.
Certificate templates with QR/Hash verifier page.
DW/BI export schemas and sample dashboards.
Annual maintenance incl. change requests; on‑prem or cloud.