Docebo

Beta: This page contains beta features and may change.

The Docebo connector indexes courses and learning objects managed in your Docebo LMS, integrating them directly into Glean Search. This connection respects Docebo permissions at query time, ensuring that search results are restricted to the visibility allowed by your source system. No data indexed by Glean leaves your cloud environment; all documents and metadata remain within your designated cloud environment.

Key features

• Comprehensive indexing: This connector recursively enumerates all learning objects and their content, providing a deep and thorough index of your course material (SCORM, AICC, slides, files, LTI, HTML pages, video metadata).
• Permissions enforcement: Mapped permissions from Docebo are always enforced in Glean at query time.
• Authentication: Supports two authentication methods: OAuth 2.0 Authorization Code and JWT Bearer.
• API: Uses Docebo REST API v1.
• Container hierarchy: Courses contain learning objects as children.

Supported objects

The Docebo connector indexes the following entities:

• Courses, and course descriptions
• Learning objects (SCORM, AICC, slides/authoring, files, LTI, HTML pages, video metadata)

Type	Key	Content Indexed
SCORM	scormorg	Downloadable content
AICC	aicc	Downloadable content
Slides Converter	authoring	Downloadable content
File	file	Downloadable content
LTI	lti	Downloadable content
HTML Page	htmlpage	Downloadable content
Video	video	Metadata only
Tests	test	Metadata only
Google Docs	googledocs	Metadata only
YouTube	youtube	Metadata only

Limitations

• Authentication scope: The connector is limited to the api scope as offered by Docebo's API; more granular scopes are not available.
• Webhook support: The connector relies on full API crawls to capture changes. It doesn't currently support native Docebo webhooks for real-time updates.
• Admin enrollment: The connector respects course enrollments, requiring the authorizing admin to be enrolled in all courses for them to be fully indexed.
• Configuration: The connector indexes all accessible courses and learning objects; it doesn't support crawl lookback periods or red/green lists.

Crawling strategy

Crawl type	Full crawl	Incremental crawl	People data	Activity	Webhook	Notes
Courses	Yes	No	No	No	No	Full crawls on a regular schedule managed by Glean.
Learning objects	Yes	No	No	No	No	Crawled as part of course full crawls.

Requirements

To enable the Docebo connector, you must have the following:

• Docebo Access: A valid Docebo cloud instance and an admin-level login with permissions to create OAuth2 applications.
• Glean Access: Administrative privileges in the Glean Admin Console.
• Enrollment: The authorizing admin account must be enrolled in all courses you wish to be searchable in Glean.
• OAuth Credentials: You must obtain a Client ID and Client Secret by registering the Glean app in Docebo.
• API and SSO App: Both installed and activated in your Docebo instance.

Setup instructions

To connect Glean to Docebo, you must provide the following Docebo details:

• Docebo domain
• Docebo vanity URL
• Client ID
• Client secret

Step 1: Determine the domain of your Docebo instance

1. Sign in to your Docebo instance as an admin. Copy the URL in the URL bar, keeping only the part that comes after the https:// and up to the .com. The expected format is: yourdomain.docebosaas.com.
2. Enter this value into the Docebo domain field in the Glean Admin console.

Step 2: Determine the vanity URL of your Docebo instance (if applicable):

1. You may have a Docebo vanity URL different from the Docebo domain. The vanity URL will usually not mention Docebo, and it is often set up to make it easier for employees to remember and navigate to important Docebo content. An example is: employee-learning.company.com
2. If applicable, enter the vanity URL into the Docebo vanity URL input box on the Glean setup page. Else, leave the field blank.

Step 3: Create an OAuth app and upload the client ID and client secret

Docebo offers multiple ways to authenticate and obtain an access token. Follow the steps that correspond to your environment’s configuration.

• Glean’s Docebo connector supports the Authorization Code + Implicit Grant type by default.
• If your application is configured to use the JWT Bearer grant type, contact Glean support to enable it.

For more information on different types of authentication mechanisms in Docebo, see API documentation.

1. Install the API and SSO App in your Docebo instance if you haven't already. Complete these steps before proceeding with the connector configuration.
   1. Open the Admin Menu(gear icon, top right) and click Add New Apps.
   2. Select the Third Party Integrations tab under Browse apps and features.
   3. Find API and SSO App and click Activate App or TRY IT FOR FREE. Confirm by clicking Install Now.
2. Refresh the page, then go to Admin Menu > API and SSO > Manage to open the Settings page.
3. Click Add OAuth2 app in the API credentials tab.
4. Enter Glean as the App name and Glean OAuth app as the App description.
5. Set a Client ID and enter it in the Client ID field of Docebo and Client ID Glean setup page. Copy the Client secret from Docebo into the Client secret field of the Glean setup page.
6. Set the Redirect URI in Docebo to: https://<your-glean-instance>-be.glean.com/instance/DOCEBO/oauth/verify_code.
7. Check Show advanced settings and enable the Authorization code + implicit grant grant type.
8. Click CONFIRM in Docebo.

warning

Activate the app by clicking the checkmark in the app's row until it turns from grey to green. The app will not work until activated.

info

Enroll the service account admin in every course you want searchable in Glean. Glean can only access courses where this admin is enrolled.

1. Install the API and SSO App in your Docebo instance if you haven't already:
   1. Open the Admin Menu (gear icon, top right) and click Add New Apps.
   2. Select the Third Party Integrations tab under Browse Apps and Features.
   3. Find API and SSO App and click Activate App or TRY IT FOR FREE. Confirm by clicking Install Now.
2. Refresh the page, then go to Admin menu > API and SSO > Manage to open the Settings page.
3. Click Add OAuth2 app in the API credentials tab.
4. Enter Glean as the App name and Glean OAuth app as the App description.
5. Set a Client ID and enter it in both Docebo and the Glean setup page. Enter the Docebo admin account's username into the Admin Username field in the Glean setup page.
6. Check Show advanced settings and enable the JWT Bearer grant type.
7. Generate a public/private key pair using the OpenSSL command-line tool:
   1. Generate the private key:

      openssl genrsa -des3 -out doceboprivate.pem 2048                                                                       

   2. Extract the public key:

      openssl rsa -in doceboprivate.pem -outform PEM -pubout -out docebopublic.pem                                           

   3. Convert the private key to encrypted PKCS8 format. Enter a passphrase when prompted:

      openssl pkcs8 -topk8 -inform PEM -outform PEM -in ./doceboprivate.pem -out doceboprivate8.pem                          

   4. Upload docebopublic.pem to the UPLOAD PUBLIC KEY field in Docebo.
   5. Copy the full contents of doceboprivate8.pem into the Private key field in the Glean setup page. Preserve all
      spacing and line breaks.
   6. Enter the passphrase you created in step 7.3 into the Passphrase field.
8. Click CONFIRM in Docebo.

warning

Activate the app by clicking the checkmark in the app's row until it turns from grey to green. The app will not work until
activated.

info

Enroll the service account admin in every course you want searchable in Glean. Glean can only access courses where this admin is enrolled.

Step 4: Configure in Glean

1. In the Glean Admin Console, navigate to Data sources, select Add data source, and select Docebo.
2. In the Docebo connector setup page, enter the following credentials you obtained from Docebo into their corresponding fields:
   • Docebo domain
   • Docebo vanity URL
   • Client ID
   • Client secret

Step 5: Initiate an OAuth 2.0 authorization flow

1. In the Glean Admin Console, navigate to Data sources, select Add data source, and select Docebo.
2. On the setup page in Glean, click Save to store the domain and client credentials.
3. Click Authorize to initiate an OAuth 2.0 authorization flow between Docebo and Glean. If necessary, log in as a Docebo admin during the flow.