ON24

The integration between Vuture and ON24 is an HTTPS API call which is always initiated from the Vuture platform. Registration data is sent to ON24 directly from a completed Vuture form, and attendance data is pulled from ON24 into Vuture on a daily basis, and sent to the client CRM using the client's HTTPS API. 

We use a POST request to send registration data to ON24, and a GET request to download the XML feed from the ON24 system. We pass the following query parameters for the HTTPS requests which we store and keep in our database:

• {"clientid", clientId},
• {"key", key},
• {"config", "partner01"}

The ClientID and Key variable is unique to each client and kept confidential, while the Config variable is unique to Vuture. 

The following protocols are used:

• Protocol: HTTPS
• Request Type: POST / GET
• URL: https://event.on24.com/utilApp/syndication/rss.jsp

For example:

• Client ID: 12345
• Key: abc123def456ghi789jkl012
• PartnerID: 01

The final HTTPS URL would look like this: https://event.on24.com/utilApp/syndication/rss.jsp?clientid=12345&key=abc123def456ghi789jkl012&config=partner01

All data in transit is secured using trusted SHA256withRSA 2048-bit TLS 1.0 to 1.2 certificates issues by a trusted CA(Network Solutions). Refer to this attachment for a Qualys Labs analysis of the certificates used. 

Further Documentation:

• The ON24Privacy Policy is available here: https://www.on24.com/about-us/privacy-policy/
• Further security information on the registration process is available in the attached document: https://helpdesk.vutu.re/helpdesk/attachments/1054009192 
• Further security information on the reporting process is available in the attached document: https://helpdesk.vutu.re/helpdesk/attachments/1054009193
• Qualys Labs Certificate Analysis: https://helpdesk.vutu.re/helpdesk/attachments/1054150679