LinkIt! Portal Pass-through

The LinkIt! portal ({district-specific-code}.linkit.com - e.g. demo.linkit.com), which usually requires the user to log in with their username and password, can also be invoked directly from a third-party website via a pass-through URL that contains information about the user. This page explains how that is achieved.

The LinkIt! platform also allows pass-through into Student Portal if the UserId specified belongs to a Student. It is also possible to bypass the Student Portal and land on Student Reporting Dashboard instead  if a URL parameter LandingPage is passed in with the appropriate value.

LandingPage possible parameters:

Pass-through URL
Staging:    https://{district-specific-code}.linkitdev.com/passthrough?q={Encrypted String}&k={AccessKey}
Production: https://{district-specific-code}.linkit.com/passthrough?q={Encrypted String}&k={AccessKey}
Encrypted String

The encrypted string can be generated by following the steps below:

  1. Use MD5 to hash the API private key.
  2. Use Triple DES algorithm to encrypt the query string with the MD5-hashed private key.
    1. The MD5-hashed private key should be in a 16-byte byte array.
    2. The Triple-DES algorithm should be in ECB mode, with padding mode PKCS7.
    3. The query string should be in JSON format with the following parameters (Note: Parameter names are case-sensitive).
      1. UserID (required) : the ID of the user.
      2. RedirectUrl (optional): the URL that the user should be returned to after they log out of the LinkIt! portal.
      3. Timestamp (required): the request time in GMT format. The pass-through URL expires 60 seconds after the request time.
      4. LandingPage (optional): the landing page key value if you require the user to land in a specific module of the Student Portal or Teacher Portal.
      5. StudentID (optional): Only use when LandingPage =”StudentHub_Plans_Documents”.

3. URL-encode the encrypted string

Example

Navigation and Reference