We have identified a pretty big security weakness in the Microsoft Teams integration and wonder if anybody has advice on how to address it.
If you are hosting a webinar (ILT), the learners enrolled in the course must log into Docebo and find the join button to access the webinar. Perfect. However, once they do that, it just opens a standard Teams meeting outside of Docebo, and once they are in there, they can find the meeting login info, and there is nothing stopping them from forwarding that to anybody. For instance, we could host a webinar for paying customers, and one of them in attendance could easily forward the meeting login info to, say, a non-paying customer to get a free course, or one of our competitors to rip off our learning content. It would be more or less impossible to spot this, since there might be dozens or hundreds of attendees, and each new attendee can put in whatever they want for their screen name. So if a new person logs into the ILT named “John Smith”, or “Donald Duck”, there’s no easy way for our instructor, who is busy teaching the course, or even an administrative assistant 100% focused on this issue, to know whether that’s an authorized user or not.
Are there tools within Docebo to better control the Team meeting parameters that get opened to ensure that attendees can’t invite everybody and their brother to what should be a private webinar?
