Waypoint Console

Learner records

Every registration captured by the platform. This is what a SCORM course reports, stored as our own columns.

Subject	Program	Completion	Result	Score	Time	Attempt	Suspend data	Last write
Loading…

Completions sent to the SaaS

Server-to-server, HMAC-signed, with a timestamp so a delivery can't be replayed. The learner's browser is never involved. Here they're received by a stub standing in for the real system.

When	Subject	Status	Endpoint	Payload
Loading…

Integration credentials

What the SaaS would be issued to talk to this platform.

The SaaS authenticates inbound calls with the API key. Waypoint signs outbound webhooks with the shared secret, so the SaaS can verify each delivery genuinely came from us. Runtime calls from the player use neither — they carry a session token scoped to a single registration, so a learner can never write to anyone else's record.