A mechanism for generating an authorization token that is later used to create an LMS session for a specified user. The authorization token allows an external user to be automatically authenticated and, if desired, sent directly into specified learning content.

Parameters can be passed to the method to determine some properties of the session to create.

Syntax

UserSessionResult = lmsBinding.CreateUserSessionWithParams (LmsPersonObject person, UserSessionParams sessionParams);

Usage

When invoked by a client application, Firmwater LMS will create/update the person object passed in and, if specified, identify the activity requested. If a department, location, and/or job title is specified by the person object that does not exist, Firmwater LMS will automatically attempt to create the necessary objects. A client application can then use the returned URL (containing the authorization token) to authenticate a user and direct them to the requested activity.

Rules and Guidelines

Permissions

A client application must be logged in with sufficient privilege and access rights to create/modify the passed in LmsPersonObject and, if specified, to register the user to receive the requested content (see CreateOrUpdate for further information).

LMS Session Described

Ordinarily, LMS users login manually from a login page. Upon authentication of the entered client ID, username and password combination, a user is granted access to an LMS session. Users with active LMS sessions are free to navigate through the LMS in accord with their security privilege and access rights. During the LMS session, users can then access learning content they are registered to receive.

Authorization Token

An authorization token serves as a means of authentication into Firmwater LMS without requiring a client ID, username, and password combination. It is a globally unique identifier (GUID) representing authentication information for a single user, and can be thought of as the user's key to Firmwater LMS. Client applications must be aware that authorization tokens may expire. A token's validity period is controlled by Firmwater LMS administrators, hence, it is recommended that client application developers contact system administrators to determine the validity period of authorization tokens created via CreateUserSessionWithParams calls.

User Authentication

If an authorization token is a user's key, the authentication page can be thought of as the door the key unlocks. As part of the response to a CreateUserSessionWithParams call, Firmwater LMS returns a URL pointing to the authentication page that is formulated to automatically authenticate the user (using the authorization token) and forward them to the requested page. A client application need simply redirect the user to this URL.

Arguments

Name	Type	Description
person	LmsPersonObject	The user for which an LMS session will be created
sessionParams	UserSessionParams	Parameters that define the properties of the session to be created for the person, such as the training content to launch, return URL, timeout URL, and the amount of time before the session should timeout.

Return Object

UserSessionResult