Skip to main content

🚀 Strengthening Platform Resilience Through Smarter API Management

Related products:Content MarketplaceLearning Management - SkillsMonetizationGamified LearningLearning Management - ILTIntegrationsLearning Management - Mobile LearningExtended EnterpriseLearning IntelligenceLearning Management - Informal learningDocebo for Microsoft TeamsLearning ManagementLearning Management - Scalability and personalizationLearning Management - Training materials and managementLearning Management - User ManagementContent CreationCommunitiesLearning Management - Compliance and LiabilityImmersive LearningDocebo for SalesforceHeadless Learning
  • June 17, 2025
  • 6 replies
  • 969 views
🚀 Strengthening Platform Resilience Through Smarter API Management
fabio.pirovano
Docebian

At Docebo, we aim to deliver a performant, scalable, and resilient platform that can support growing demand and increasingly complex integrations.

 

To uphold this standard, we’re introducing a refined API request management strategy and enhanced system overload handling, which align with industry best practices and ensure continued operability and performance for all customers.

 

🔒 Smarter API Limits: Protecting Fair Access and Service Quality

Starting June 2025, we will begin enforcing the API request limits already defined in your existing contract, ensuring fair usage and protecting platform stability for all customers.

  • If your API usage remains within your contractual thresholds, you will not experience any changes.
     
  • If you exceed your limit, the system will respond with a status code "429 - Too Many Requests.
     
  • We recommend adopting a graceful degradation strategy to minimize service disruption, such as  exponential backoff with retry logic.

This change reflects proven practices used by leading cloud providers to maintain high system availability while giving clients the transparency and tooling needed to scale responsibly.

 

⚙️ A More Predictable Response to Load: From 500s to 503s

In parallel, we are improving the system's behavior under high traffic loads. Historically, the platform would return a generic HTTP 500 error when capacity was exceeded.

Moving forward:

  • In scenarios where the service is temporarily overwhelmed, you will now see a 503 - Service Unavailable response instead. With more precise information shown directly to the end user as well. 

 

  • This adjustment better reflects the real nature of the event and allows for intelligent retry behavior in your applications and integrations.
     

This marks an important milestone in our journey toward proactive platform resilience. By embracing rate limiting, precise error signaling, and other cloud-native reliability patterns, we can better absorb unexpected load spikes and maintain service continuity, preserving availability for most users even under pressure. This standard practice among leading SaaS platforms reflects our commitment to delivering uninterrupted value, even in moments of exceptional demand.

 

👀 Proactive Outreach for High Usage Customers

As part of the initial Traffic Monitoring Phase, we closely analyze API usage patterns across our infrastructure. If your organization is identified as consistently exceeding your contracted API request threshold during this observation period, your assigned Customer Success Manager (CSM) will personally reach out to notify you. This proactive communication ensures you have the time and support to align your integrations with the new limits well before enforcement begins.

This approach reflects our commitment to partnership and transparency, ensuring that changes are not just deployed but supported with meaningful guidance and collaboration.

 

🗓️ Rollout Timeline

We’re deploying these enhancements in phases to allow for visibility, preparation, and adaptation:
 

  1. Staging Rollout – Started June 16, 2025
    API limits and enhanced status codes will be active in staging. This is your opportunity to test integration behavior and update error-handling logic.
     
  2. Progressive Production Activation – From June 25, 2025
    We will gradually enforce limits in production, ensuring a controlled and transparent adoption curve.

 

6 replies

Bkatzman
Influencer III
Forum|alt.badge.img+1
  • Influencer III
  • June 18, 2025

Greetings!

I don’t want to assume what types of tasks/activities fall under this, so can you clarify what they are? Is this just revolve around processing API integrations, i.e. ADP>Docebo, or is does it involve other processes, like importing .csv files, etc...?

Thanks!


pmo
Docebian
Forum|alt.badge.img+4
  • Docebian
  • July 15, 2025

Greetings!

I don’t want to assume what types of tasks/activities fall under this, so can you clarify what they are? Is this just revolve around processing API integrations, i.e. ADP>Docebo, or is does it involve other processes, like importing .csv files, etc...?

Thanks!




I can’t speak directly for the product team but I know that a CSV upload counts as a backend process similar to say creating enrollments or users and would qualify as a different type of a process. Needless to say CSV imports should be untouched by this process unless you are triggering them via API at which point they would be governed by the rules mentioned above.


In staging we have lowered the thresholds for throttling: now you can make 165 requests per second per user (or per ip if the user token is not available). On top of that you have a burst of 600 requests that can be consumed and will be refilled when you stay below the 165 requests per second.

Please consider that the above thresholds may change in the future.


KMallette
Hero II
Forum|alt.badge.img+9
  • Hero II
  • August 14, 2025

@pmo ​@fabio.pirovano ​@eugenio.pombi 
I’m working on an API integration to add users to my Docebo platform (using PHP 8.4.11), and I would like to have my script check for 429 errors.  When I add in this error code (and then test the .php file) my authentication to my Docebo platform always fails. I take out the 429 check and authentication works. 

Any thoughts, tips for checking for this error?  I am a very novice coder and am using Claude.ai to ‘write the syntax’ as he says. 

Thanks!

 


dwilburn
Guide III
Forum|alt.badge.img+4
  • Guide III
  • August 15, 2025

Hi ​@KMallette - have you feed the script and the response into Chat GPT for analysis? Are you authenticating within the script with a fixed token?


pmo
Docebian
Forum|alt.badge.img+4
  • Docebian
  • August 16, 2025

@pmo ​@fabio.pirovano ​@eugenio.pombi 
I’m working on an API integration to add users to my Docebo platform (using PHP 8.4.11), and I would like to have my script check for 429 errors.  When I add in this error code (and then test the .php file) my authentication to my Docebo platform always fails. I take out the 429 check and authentication works. 

Any thoughts, tips for checking for this error?  I am a very novice coder and am using Claude.ai to ‘write the syntax’ as he says. 

Thanks!

 


Really tough to diagnose without looking under the hood (and even then php isn’t my strong suit) but I would suggest asking the LLM to include some logging to better understand what might be happening.