Authentication and authorization

This section details the authentication methods supported by the system, such as SSO, LDAP, OAuth, and SAML, as well as how user access is managed and restricted based on roles.


Provide robust permissions and access control options for content, based on user characteristics (e.g., role, location)

Answer

Moodle provides robust permissions and access control options based on user characteristics such as role, location, and other custom user profile fields.

Assigning and restricting access: Administrators can assign or restrict access to content through Moodle’s role-based access control (RBAC). This allows for fine-grained control of who can view or edit specific content. Access is based on:

Role permissions: Administrators can configure permissions at the system, course, and activity level to control access to content, allowing for tailored access control for different user groups.


Supports ability to set permissions and access levels based on established criteria

Answer

Moodle supports role-based permissions and access control using its Roles and Capabilities system. Permissions can be customized based on user roles, cohorts, or other criteria to restrict or grant access as needed.


Supports mobile check-in functionality for in-classroom courses based on a UID

Answer

Moodle doesn’t natively support mobile check-ins with UID, but this can be achieved via the Attendance plugin with QR codes, custom mobile app features.

Janice’s comment

Moodle doesn’t natively support mobile check-ins with UID, but this can be achieved via the Attendance plugin with QR codes, custom mobile app features.


Does the system have the ability to toggle between role types while remaining logged in

Answer

Yes, Moodle allows users with appropriate permissions to switch roles within a course using the ‘Switch role to…’ option in the user menu. To revert, select ‘Return to my normal role’. Note that some user-specific data, like grades, may not be visible in this mode. For a complete perspective, administrators can use the ‘Log in as’ feature, though returning to the original account requires logging out and back in.


Does your system offer access to different reports based on permission level

Answer

Yes, Moodle offers access to different reports based on user permission levels. Administrators can configure roles and permissions to control who can view specific reports. For example, instructors may only have access to reports related to their own courses, while administrators can access system-wide reports, such as logs, grades, and course participation. This ensures that sensitive information is only available to authorized users, while still allowing managers and instructors to monitor relevant data.


How is access to the application controlled? How are users identified and authenticated

Answer

Access to Moodle is controlled through user authentication methods like username/password, LDAP, OAuth, or social media logins. Users are identified by their credentials, and access to features is managed through roles and permissions set by administrators.


Does the system support the use of Single Sign On

Answer

Yes, Moodle supports Single Sign-On (SSO) through integration with various protocols like SAML, OAuth, and OpenID Connect. This allows users to log in once and access Moodle without needing to re-enter credentials, streamlining the authentication process.


Does your organization require all users to have unique user accounts on systems that store, access, and or transmit customer data

Answer

Yes, we require all users to have unique user accounts on systems that store, access, or transmit customer data.


Are user accounts assigned based on the principle of “least privilege”

Answer

Yes, user accounts are assigned based on the principle of “least privilege” using Moodle’s role-based access policy.


Does your organization enforce strong password policies? If yes, please describe your current password controls

Answer

Yes, we enforce strong password policies using Moodle’s default settings, which require passwords to be at least 8 characters long and include at least one digit, one lowercase letter, one uppercase letter, and one non-alphanumeric character.


Does your organization utilize roles-based security when provisioning user accounts? If yes, please describe how roles are defined, monitored, and revised to meet organizational needs

Answer

Yes, our organization utilizes role-based security for provisioning user accounts. Roles are defined based on permissions assigned to various user types, such as students, teachers, and administrators. These roles are monitored and revised as needed through Moodle’s administrative interface to meet organizational needs and ensure appropriate access control.


Does your organization perform account user access reviews? If yes, how often are these reviews performed? Describe the user access review process including account selection, issue documentation, and corrective actions

Answer

We perform user access reviews for our team. Customers have their own administrators who manage access reviews according to their requirements.


Is two-factor authentication implemented for environments containing customer data? If yes, what authentication products are used by your organization

Answer

No, two-factor authentication is not yet implemented, but we are currently looking into it.


Does your organization require authentication for remote access to server environments

Answer

We don’t allow remote access to server environments. Access is only permitted through the application interface.


Does your organization verify deactivation of login credentials upon end of employment or contract service? If yes, describe the process

Answer

Yes, we verify the deactivation of login credentials upon the end of employment or contract service. This is managed through Moodle’s role-based access system, ensuring that user accounts are promptly deactivated and access is revoked.


Intuitive interface with all aspects of e-Learning accessible from a single log on

Answer

The courseware provides an intuitive interface with a single sign-on (SSO) system, allowing learners to access all aspects of e-Learning—from courses and assignments to forums and grades—through a unified dashboard. Its customizable navigation and responsive design ensure a seamless and user-friendly experience across devices.


What types of questions are included? Is the student provided the correct answer if they choose incorrectly

Answer

Our courses include a variety of question types designed to assess learners’ understanding and reinforce learning. These include multiple-choice, true/false, short answer, matching, and scenario-based questions. Additionally, we use interactive question types such as drag-and-drop and fill-in-the-blank to engage learners in a more dynamic way.

If a learner answers incorrectly, the courseware typically provides immediate feedback. In many cases, learners are given the correct answer along with an explanation to help them understand the mistake. This feedback is designed to enhance learning by clarifying concepts and guiding the learner toward the correct understanding. In some cases, incorrect answers may lead to additional resources or hints to help students review the material before attempting the question again. This approach encourages learners to engage with the content actively and promotes a deeper understanding of the subject matter.


What student assessment options does your courseware include? Do you offer the ability to take pre- and/or post-assessments

Answer

Our courseware includes a wide range of student assessment options to ensure learners’ progress and comprehension. These assessments include quizzes, multiple-choice tests, short answer questions, case studies, interactive simulations, and practical exercises. These tools are designed to evaluate learners’ understanding of key concepts and skills.

Additionally, we offer the ability to take pre-assessments and post-assessments. Pre-assessments help determine learners’ baseline knowledge and identify areas where they may need additional focus. Post-assessments, on the other hand, measure the learners’ progress and mastery of the course material after completing the course. Both types of assessments are valuable for tracking improvement and guiding future learning paths.


Can students “test out” after taking a pre-assessment and receive credit for material they have already mastered

Answer

Yes, our courseware includes the option for students to “test out” of certain sections after taking a pre-assessment. If a learner demonstrates proficiency in a specific area during the pre-assessment, they can bypass related content and receive credit for material they have already mastered. This allows learners to focus on areas where they need further development, enhancing the efficiency of their learning experience. This “test out” functionality helps personalize the learning path and ensures that students are not required to repeat material they already know.


Are certificates available to the student for successful completion of the course

Answer

Yes, certificates are available to students upon successful completion of the course. These certificates serve as formal recognition of the learner’s achievement and can be used for professional development, continuing education, or as proof of mastering specific skills and knowledge. The certificates typically include details such as the course title, completion date, and the learner’s name. In some cases, they may also include a summary of key competencies or skills gained during the course.


Can administrators access certificates

Answer

Yes, administrators can access certificates. They have the ability to view, download, and manage certificates issued to learners through the courseware platform. This functionality allows administrators to track course completion, monitor learner progress, and ensure that certifications are properly issued to those who successfully complete the courses. Additionally, administrators can often export reports related to certificates for record-keeping or reporting purposes.


Discuss your student registration process

Answer

Our student registration process is designed to be user-friendly and efficient, allowing learners to easily enroll in courses and begin their learning journey. The process begins with the learner creating an account on our platform by providing basic details such as name, email, and preferred login credentials. Once the account is created, learners can browse the available courses and select the ones they wish to enroll in.

In some cases, registration may require additional steps, such as selecting a learning path, completing a pre-assessment, or receiving approval from an administrator or manager. Upon course selection, learners receive confirmation of their enrollment, and access to the course materials is granted immediately.

For organizations that wish to manage registrations for multiple learners, we offer administrative features that allow batch enrollment, user group management, and tracking of learner progress. Administrators can also customize the registration process to meet specific organizational needs.


Can there be different levels of security for administrators for doing tasks such as adding or updating students, or viewing reports

Answer

Yes, our system offers customizable levels of security for administrators, allowing different roles and permissions to be assigned for tasks such as adding or updating students, viewing reports, and managing course content. Administrators can be granted varying levels of access based on their responsibilities and needs. For example, a user may have full administrative rights to manage students, assign courses, and view all reports, while another user may only have permission to view reports or manage a specific group of learners.

These role-based permissions are configurable, ensuring that sensitive data is protected and that users only have access to the areas necessary for their job functions. This system helps maintain security and control over the management of courses and learner data, and ensures that administrators have the appropriate level of access to perform their duties.


Can individual students view/print a transcript that would include courses taken, courses passed, test scores, and credits received? Please describe. Are transcripts available to others, such as a student’s manager

Answer

Yes, individual students can view and print a transcript that includes detailed information on the courses they have taken, the courses they have passed, test scores, and any credits they have received. The transcript provides a comprehensive record of the learner’s achievements and progress within the courseware. Students can access this transcript through their personal dashboard and print or download it as needed for their records.


Does your system support access control by assigning different access levels with different features by staff role (e.g., “learner”, “supervisor”, “administrator”)

Answer

Moodle fully supports role-based access control with customizable permissions.


Does your system support user profile customization, allowing the assignment of specific titles (separate from role) and the assignment of users to “learner groups” based on title (e.g., trainee staff, senior staff, examiner-in-charge)? Does it also allow the identification of users with specialized certifications (e.g., Certified Public Accountant)

Answer

Moodle supports custom user profile fields and cohort/group assignments, allowing users to have specific titles and be grouped accordingly. Certifications can be tracked using badges or custom profile fields.


Does your system support guest profiles, allowing the tracking and management of guest learners (non-SGA/LGSA users) to be enrolled in training events or learning paths, access courses, attend live events, and register for classes/events

Answer

Moodle supports guest access to courses, enabling non-registered users to view content, attend live events, and register for classes with limited functionality.


Does your system allow learners to certify completion after reading a policy

Answer

Moodle supports self-certification through completion tracking, allowing learners to mark policies or activities as completed after reading or reviewing them.


Does your system include security protections for sensitive information

Answer

Moodle includes security features such as SSL encryption, user role management, data privacy settings, and compliance with standards like GDPR to protect sensitive information.


What authentication protocols does your system support to prevent unauthorized access

Answer

Moodle supports various authentication protocols such as OAuth, LDAP, SAML, and Moodle’s internal authentication, ensuring secure login, preventing unauthorized access, and reducing data breach risks.


Can your system easily inactivate and reactivate user accounts

Answer

Moodle allows administrators to inactivate user accounts by disabling them, with the ability to easily reactivate them at any time through the user management interface.