CC Launcher Links

CC Launcher Links

How It Works

Launcher links allow content to be shared via a URL link without the use of an LMS. When a user shares the URL link, the hosted launcher package makes a call back to their Content Controller instance. The Rustici SCORM Adapter within CC builds a request URL that calls the launch API. The launch API verifies that the package token is associated with the content token. Upon verification, it returns the relevant dispatch information needed to fill out the template dispatch within the hosted package. The Rustici SCORM Adapter will then start the content in the player.

This section covers using a launcher link to successfully play a course. For the sake of brevity, the UI instructions are included here. Check the Content Controller Automation API for the API calls. The flow will be similar, if not the same, as the UI use case. The major area where the UI and API use cases overlap is setting up the launcher package on a web server environment.

Enable The Feature

This feature is an additional feature that is not included in the base Content Controller. Contact us at Rustici Software to find out how to add this feature to your instance of Content Controller.

The launcher link package contains the content player, which is the web application that you need to host on your server. Each account can create launcher link packages. The package is based on Rustici SCORM Adapter; an LMS adapter that allows SCORM content to be played. The package structure needs to be maintained when it is unzipped. Everything in the unzipped package must be web-accessible relative to index.html.

To create a launcher link in the UI:

  1. Within an account, go to Advanced → Launcher and expand the Links section.
  2. Select Add to open the Add Launcher Link modal.
  3. Enter a Launcher Link Name and the URL where the launcher package will be hosted (HTTPS required; include the package path).
  4. Select Add Link.

Use Download to retrieve the launcher package ZIP for hosting. Use Delete to remove a disabled link permanently.

Only the Launcher Link Name and URL can be changed after creation. The ccPackageToken value embedded in the launcher package’s index.html does not change when you edit a link.

⚠️ Warning
A launcher link must be disabled before it can be edited or deleted.

To edit a launcher link:

  1. Within an account, go to Advanced → Launcher → Links.
  2. Disable the link using the status switch and confirm.
  3. Click Edit (the button is locked while the link is enabled; tooltip: Cannot be edited while enabled).
  4. Update Launcher Link Name and/or URL as needed.
  5. If you change the URL, note the warning: Changing this URL may disrupt launch links already shared or in use. A URL change requires re-hosting the launcher package at the new location. Shared course URLs are not affected.
  6. Optionally check Download launcher package after save.
  7. Click Save, then re-enable the link when you are ready.

The Automation API supports edits via PUT /accounts/{accountId}/launcherLinks/{launcherLinkId}. The UI enforces the disable-before-edit rule.

Host The Package

Unzip the launcher package on your web server. As mentioned earlier, make sure to leave the package structure as-is. There are a couple of items in config.js that can be customized. Currently, these are studentId and studentName. The template config.js includes an example of how to generate a UUID as the learner ID each time the content is accessed.

Unique identification for learners is the responsibility of the hosted launcher package.

Share Content With A Launcher Link

We currently support sharing individual pieces of content. For instance, an individual course within a bundle can be shared but not the whole bundle. Sharing content is as simple as selecting Share on the content and finding the launcher link name in the drop-down. Then select Get link. The URL that appears is the launcher link URL meant to be shared with whomever is allowed to take the course. It has a unique token that identifies which course the hosted player should play.

Items Of Note

  • The dispatch offering up the content can still be limited by licensing and course deactivation.
  • Access to the content can be removed by disabling the launcher link. This is in addition to the more traditional CC methods.
  • In the launcher package, index.html contains the package token, ccPackageToken, used to verify that the correct package is attempting to play the content.
  • Unique identification for learners is the responsibility of the hosted launcher package.
💡 Tip
Optional. The sections above are all you need for standard launcher links. Continue below only if your organization requires learners to sign in through an identity provider before launching a course.

Before configuring SSO, complete the launcher link setup in the previous section. SSO is configured separately under Advanced → Launcher, in the Single Sign-On (optional) section.

Overview

By default, launcher links are public, so anyone with the link can launch and take a course anonymously. Enabling SSO adds an authentication barrier to the link. Rather than taking a learner directly to the course, they’re brought to your Identity Provider’s sign-in page (such as Okta or Azure AD), and once successfully authenticated, they’re directed to the course.

Enabling SSO applies it to the entire account, including all launcher links under that account.

ℹ️ Info
Content Controller currently only supports SAML 2.0.
Adding support for OIDC is currently in development and will be coming soon.

How SSO Works

When SSO is enabled, learners follow a short sign-in flow before the course opens:

  1. Open the course link: The learner clicks the same shared link they would use without SSO.
  2. Sign in: They are redirected to your organization’s login page (for example, Okta or Azure AD). Content Controller never sees their password.
  3. Launch the course: After a successful login, they are sent back to the course link and the player starts.

Where mapped learner data goes

The Attribute Mapping settings tell Content Controller which details your identity provider sends for each learner, such as a unique ID and name. Content Controller uses that information to record who took the course. Those details are not added to the course link URL that learners share.

Instead, Content Controller collects them during sign-in and passes them securely to the hosted player. When SSO is enabled, this replaces the anonymous learner name and ID you would otherwise set up in the hosted launcher package.

Set Up SAML 2.0

Go to Advanced → Launcher, expand Single Sign-On (optional), and select configure within the SAML 2.0 card. Work through the configuration form in this order:

General Details

Enter a Name for this SSO connection—a label you’ll recognize when sharing content (for example, Corporate Okta Login).

Service Provider Details

Copy the Service Provider Entity ID and ACS URL from Content Controller into the corresponding fields in your SAML 2.0 identity provider. Your IdP uses these values to generate the identity provider details needed in the next step.

Example values (your instance will differ):

  • ACS URL: https://your-instance.contentcontroller.com/api/launch/launcherLink/sso/saml/callback
  • Service Provider Entity ID: https://your-instance.contentcontroller.com/api/launch/launcherLink/sso/saml/sp/your-account-id

Identity Provider Details

Copy the details generated by your identity provider into Content Controller:

  • Identity Provider Entity ID: The unique ID string from your identity provider.
  • SSO URL: The web address where users sign in.
  • X.509 Certificate: The complete public certificate text block from your identity provider.

Attribute Mapping

Tell Content Controller which SAML attributes your identity provider sends for each learner:

  • Learner ID (required): The unique property that identifies the student (for example, userId or email). This value is used as the learner ID in the course player.
  • First Name (optional): Maps the learner’s first name for Engine history reports.
  • Last Name (optional): Maps the learner’s last name for Engine history reports.

Test Your Configuration

Testing ensures the connection works before you save or enable it for live learners.

  1. Click Test in the Configuration Test (recommended) section of the SAML form.
  2. A popup window will open and redirect to your identity provider login screen.
  3. Sign in with your IdP credentials.
  4. On success, the popup will close and the Test Results panel will expand with result details.

Success displays a confirmation alongside an attributes summary showing what data Content Controller extracted (for example, learner_id, first_name, last_name) based on your mappings.

Failure displays an error with details (such as an invalid signature or timestamp skew) to help your IT team troubleshoot.

Save and Enable

Save and Enable are separate steps:

  1. Click Save to store your SAML configuration and return to the Launcher page.
  2. On the SAML 2.0 card, toggle SSO on to enable the configuration.

Saving a new configuration does not activate SSO until you enable it from the Launcher page.

Enable or Disable SSO

Enabling SSO

When you enable an SSO configuration, Content Controller asks for confirmation:

Are you sure you want to enable this SSO configuration? Learners will not be able to launch courses provided through Launcher links unless they have authenticated through the configured identity provider.

Click Enable to confirm. All active launcher links under the account immediately require authentication through the configured identity provider.

Disabling SSO

When you disable an active SSO configuration, Content Controller shows a Disable Configuration modal:

Are you sure you want to disable this SSO configuration? Learners will be able to launch courses provided through Launcher links without being authenticated.

The modal includes a Disable Launcher links checkbox, checked by default. When checked, all enabled launcher links are disabled at the same time as SSO, preventing unauthenticated access while SSO is disabled. Uncheck the box to leave launcher links enabled; they revert to the standard public configuration where anyone with the link can access the course.

Click Disable to confirm, or Cancel to keep SSO enabled.