Settings
Roles, tenant isolation, demo controls, and backend integration requirements.
Identity & Role
Server-side enforcement required in production. UI controls are not authorization.
Demo User
Permissions must be enforced server-side. Every client-owned record scoped by tenant ID. Never rely on hidden UI controls.
Role Permissions
Access matrix
Demo Controls
Reset sample data or toggle Demo/Live indicator
Fallback LLM Provider
OpenAI-compatible endpoint used when IntelliGate is undergoing maintenance
Not configuredKey: Not set
This key is stored in the browser (localStorage) and sent to the server at call time. For production, move to a server-side secret store. The primary IntelliGate key remains server-only.
When IntelliGate fails, the assistant tries this provider before falling back to local deterministic responses.
Backend Integration Requirements
Production capabilities not yet connected
Secure backend services
Server-side authentication, durable storage, scheduled tasks, and secrets management required for production.
Tenant isolation
Every client-owned record scoped by tenant ID, enforced server-side.
SCORM Cloud adapter
Documented API for registrations, callbacks, and hosted launch. Verify account entitlements.
LRS statement retrieval
Separate from SCORM callbacks. Use documented APIs or scheduled reconciliation.
Fusion webhook
Authenticate incoming requests. Resolve tenant/enrollment. Deduplicate. Quarantine unmatched.
Certopus issuance
Verified integration. Prevent duplicate certificates. Store provider ID + verification URL.
Secrets management
API keys and provider credentials out of browser code. Read inside server-only boundaries.
Team
Ownership labels and assignments