Are you sure you want to remove this component?
Schoolbox provides a method for integrating remote services via an iframe or new window. It will automatically pass trusted credentials through to your application. Your application can then optionally verify and utilise this information to identify the user accessing the service.
On this page, you will find the following information:
Are you sure you want to remove this component?
In order to open an application in a Schoolbox iframe you must use the following URL in Schoolbox - http://schoolbox/modules/remote/{base64encodedURL}
The URL you wish to be loaded should be base64 encoded on the end of the string.
You can optionally add /window on the end of the URL to open the page in the complete window rather than an iframe. This will open the page you want in that window without any of the Schoolbox interface around it - Just like opening it up directly on that page like you would with any other link regularly (such as a link you search for in google). The authentication will still work this way too, just in case you were wondering! If you didn't apply the /window, it would open embedded in an iframe with the Schoolbox interface still there.
To encode your URL use the following online tool. http://www.freeformatter.com/base64-encoder.html
If you wish to control the height of the iframe. You may optionally include the parameter (zx_h).
For example before base64 encoding the url.
Are you sure you want to remove this component?
Your system will need to have a page which accepts the following GET parameters:
The id parameter is the current user's External ID. The time parameter is an Epoch/Unix timestamp of the current time generated by Schoolbox. You should ensure that this time is within 5 minutes of the current time on your server for security purposes. Finally, the key parameter is a SHA1 hash of the shared secret, the time and the user's External ID concatenated together in that particular order.
The following is an example scenario where a user has accessed http://10.1.1.31/enrolment_details/ through the custom module we are developing.
Link to http://schoolbox/modules/remote/IGh0dHA6Ly8xMC4xLjEuMzEvZW5yb2xtZW50X2RldGFpbHMv
Internal vars
User is redirected to http://10.1.1.31/enrolment_details/?key=01f78cd0b7fdf44268c53e096e6044861ea58614&time=1323305767&id=24249&user=jsmith
The shared secret and URL where the parameters will be passed to for authentication are changeable.
The shared secret is set in Schoolbox at: Administration > Settings > Security > Remote Shared Secret
Note: The placeholders [username], [externalId], and [email] are automatically filled with the profile’s actual details.
Are you sure you want to remove this component?
As a Superuser, you can add an iFrame widget to a student profile. This allows you to embed external content directly into the profile view, creating a more connected and efficient experience for teachers, students, and admins.
You can embed third-party systems like:
This gives quick, context-specific access without needing to switch systems or log in again.
To do this:
Next, in iFrame Link, enter the full URL of the webpage you want to embed on the student’s profile page.
This should be the exact link to the external tool, dashboard, or resource you want to display.
Note: If you're using tokens like [username] or [email], make sure to include them in the URL so the content personalises for each student.
Note: If you wish to secure this URL behind the remote services API, wrap the URL in the following string remote_service( https://url ). This will automatically encode the URL using base64 and pass it as a parameter to the remote services API when the profile is loaded.
Are you sure you want to remove this component?
Remote Services let you bring in content from another website, like a dashboard, learning app, or online tool, and show it right inside a Schoolbox page. It’s a simple way to connect external resources without making users leave Schoolbox.
As a Superuser, you can embed a remote page or service into Schoolbox using the Remote Services API.
To do this:
[email]- their email address
For example:
remote_service(https://tools.yoursite.com/dashboard?user=[username]&email=[email])
Each user will see a version of the link that's personalised for them.