Degreed Integration

Give your Degreed learners seamless access to AI-powered language practice. Conversaflex supports French, English, Spanish, and more languages coming soon. When a learner clicks the Conversaflex link inside Degreed, they are signed in automatically — no separate login required. Accounts are created on the fly the first time a learner connects.

What Your Learners Get

Feature	Description
AI Conversation Practice	Real-time conversation practice with Madame AI in French, English, Spanish, and more — tailored to professional contexts
Seamless Access	One click from Degreed — no extra credentials to remember
Auto-Provisioning	New learner accounts are created automatically on first visit
Progress Tracking	Practice days, conversation counts, and badges visible in their Conversaflex dashboard

How It Works

sequenceDiagram
    participant L as Learner
    participant D as Degreed
    participant C as Conversaflex

    L->>D: Clicks Conversaflex link
    D->>D: Builds signed URL (HMAC-SHA256)
    D-->>L: Redirect to Conversaflex
    L->>C: GET /auth/partner?email=…&signature=…
    C->>C: Verify signature & expiry
    C->>C: Provision or find user
    C-->>L: Set session cookie → Dashboard

Setup Steps

1. Contact Conversaflex

Reach out to alexa@conversaflex.com and request a Degreed integration. We will provision your organization and send you:

• Your Organization ID
• Your Shared Secret (HMAC signing key)
• A pre-built launch URL template ready to paste into Degreed

2. Add the Launch URL in Degreed

In your Degreed admin console, add Conversaflex as a custom content provider or deep link. Paste the launch URL template we provide — no custom code is needed.

Degreed will automatically append the learner's email and build the signed redirect when a learner clicks the link.

3. Test the Integration

Open Degreed as a test learner and click the Conversaflex link. Verify that:

• You land on the Conversaflex dashboard without a login prompt.
• Your user account was created in the correct organization.

4. Roll Out to Learners

Add the Conversaflex link to the relevant Degreed pathways, plans, or skill areas and notify your learners.

---

Completion Tracking

Conversaflex automatically reports weekly practice completions back to Degreed. Every Sunday, the system checks which learners practiced during the past week and sends a completion record to the Degreed API. This means learner activity appears directly in their Degreed profile without any manual work.

How It Works

1. Each Sunday, Conversaflex calculates practice statistics for all organizations.
2. For organizations with Degreed integration enabled, any learner who practiced at least once during the week receives a completion record in Degreed.
3. Completions are posted via the Degreed Completions API using OAuth2 client credentials.

What You Need

Item	Details
Degreed OAuth Client ID	From your Degreed admin console (API Credentials)
Degreed OAuth Client Secret	From your Degreed admin console
Required Scopes	completions:write, content:write, users:read
Data Center	US, EU, or CA — must match your Degreed instance

Setup

Your Conversaflex admin will configure the Degreed OAuth credentials in the admin console under External Integration > LMS Integration (Degreed). Once enabled, completions are reported automatically each week.

What Learners See

A "Language Conversation Practice" completion appears in their Degreed profile for each week they practiced. This counts toward pathways, skill plans, and any reporting dashboards in Degreed.

---

Weekly User Reconciliation (True-Up)

Conversaflex runs a weekly reconciliation every Sunday to keep accounts in sync with Degreed. If a user is removed from Degreed or has their login disabled (e.g., an employee leaves the organization), their Conversaflex account is automatically disabled during the next reconciliation run.

How It Works

1. Every Sunday at 2:30 AM EST, the reconciler fetches the full user list from the Degreed API.
2. For each Conversaflex member in the organization, it checks whether the user still exists in Degreed and whether their login is enabled.
3. If a user is missing from Degreed or has login-disabled set to true, their Firebase Auth account is disabled — they can no longer sign in to Conversaflex.
4. An email summary is sent to administrators listing all disabled accounts.

What Happens to Disabled Users

Aspect	Details
Login	Disabled — the user cannot sign in via any method (partner link, SSO, email/password)
User Data	Preserved — conversations, vocabulary, badges, and progress remain intact
Reversibility	An admin can re-enable the account manually in the Firebase Auth console
Data Deletion	Data may be periodically removed in a separate process. Disabling the account does not trigger data deletion.

Important Notes

• The reconciler only disables accounts — it does not delete user data.
• The reconciler does not re-enable accounts. If a user is re-enabled in Degreed, an admin must manually re-enable the Conversaflex account.
• Only users whose email appears in the Degreed instance are evaluated. Users provisioned through other channels (direct invite, SSO) are not affected.

---

Deep Link Reference

This section is for teams who need to understand the URL format or build custom integrations beyond the standard Degreed setup. Most Degreed customers do not need this — the launch URL template we provide handles everything.

URL Structure

https://conversaflex.com/auth/partner?email=USER_EMAIL&orgId=ORG_ID&expires=UNIX_TIMESTAMP&signature=HMAC_SIGNATURE&redirectUrl=/dashboard

Parameters

Parameter	Required	Description
email	Yes	Learner's email address (must match what Degreed sends)
orgId	Yes	Your Conversaflex Organization ID
expires	Yes	Unix timestamp (seconds) when this link expires
signature	Yes	Hex-encoded HMAC-SHA256 signature
redirectUrl	No	Path the learner lands on after login (default: /dashboard)

Signature Format

The signature is an HMAC-SHA256 hash of the string email|orgId|expires, using your Shared Secret as the key.

For code examples in Node.js, Python, or shell, see the Simple Authentication guide.

Security Notes

• Keep the Shared Secret server-side only. Never expose it in browser code or Degreed custom scripts.
• Use short expirations (5 minutes recommended). The link only needs to survive the redirect.
• Signatures are tamper-proof. Changing any parameter invalidates the signature.

---

FAQ

Do learners need a Conversaflex account before clicking the link? No. Accounts are created automatically the first time a learner arrives via a signed URL.

What happens if a learner already has a Conversaflex account? They are signed in to their existing account. No duplicate is created.

Can we control which learners have access? Yes. Only learners whose signed URL is generated with your Organization ID and Shared Secret will be admitted. You control who sees the link inside Degreed.

What happens if the link has expired? The learner sees a friendly error page and can request a new link by clicking the Conversaflex link in Degreed again.

Does this require SAML or OIDC configuration? No. The Signed URL approach is self-contained — no Identity Provider setup, no metadata XML, no certificate exchange.

Do we need to write any code? No. We provide a ready-to-use launch URL template that you paste into your Degreed admin console. Degreed handles the redirect automatically.

---

Support

Questions or issues? Contact alexa@conversaflex.com and we will get you set up.