REQUIRED PREWORK—BEFORE you set up the app, answer the following:
1. How will you co-roster with a shared Identifier? Each user must have a unique identifier that is shared by HMH Ed and Schoology. This requires the ability to co-roster with specifically matched fields. How you plan to match roster Identifiers must be determined prior to configuring the app, as a custom configuration code that defines the Identity connect must be included during App Set-up inside Schoology. See Required Prework: Co-Roster Ed-Schoology with Shared Identifier for details.
2. To prevent identity theft, have you ensured that your users cannot edit the field(s) your organization uses as the matching field(s)?
HMH requires that you lock down your LMS from end users' ability to edit their usernames, student/staff ids, and emails. Failure to restrict data editing on these fields by end users can lead to identity theft for which your district would be responsible. For example, if I can edit my LMS username, I can change it to a co-worker/classmate, launch from LMS to Ed as another user, and then change my LMS data back. To prevent this from happening, simply make sure the LMS is locked down from users making edits to data.
