Protecting Public Content

To be able to embed H5P content on other platforms without using LTI, the content has to be publicly available. This means anyone visiting your page, can copy the embed code and use it on their site. If this is not wanted, h5p.com can protect the content by offering a domain whitelisting feature. I.e: if you want your content only to be available from www.mysite.com, you add www.mysite.com to the whitelist. If someone embeds your H5P on another site, the H5P content won't be displayed.

This feature can be set up on the organization/account level, per content, or as a combination of these.

Setup domain whitelisting for the organization

Below are the steps to set up whitelisting of domains on the organization level:

1. Log in as an administrator
2. Click Manage Organization
3. In the left panel click Settings
4. Expand Security settings
5. Click the dropdown menu under Domain whitelisting. Below are the choices:
   • Never: Content that is published can be embedded anywhere.
   • Set per content - on by default: Content can only be viewed if they are embedded in a site listed in the Allowed Domains. Authors can change this setting in the content editor (instructions for authors below).
   • Set per content - off by default: Contents that are published publicly can be viewed by anyone. Authors can change this setting in the content editor (instructions for authors below).
   • Always: Contents can only be viewed if they are embedded in a site listed in the Allowed Domains.
6. Type the domain then click the add domain button
7. Click Save settings

If "Set per content" is chosen, the author will get the possibility to change this per content. I.e: the author can:

• Disable the whitelisting
• Add more domains (in addition to the ones set up by the administrator)

Setup domain whitelisting per content

Below are the steps to set up whitelisting per content. Please note that domain whitelisting settings will only be available after saving the content.

1. Edit the content
2. Go to Publish
3. Click on Content Availability
4. Click the dropdown menu under Domain whitelisting. Below are the choices:
   • Domain whitelisting ON: Contents can only be viewed if they are embedded in a site listed in the Allowed Domains.
   • Domain whitelisting OFF: Contents that are published can be embedded anywhere.
5. Type the domain then click the add domain button
6. Save the content.