Zoom integration | HockeyStick AI

One connected journey

What the integration does

HockeyStick AI connects one designated, licensed Zoom Webinar host to one authenticated HockeyStick engagement. It keeps the customer in control while HockeyStick performs three launch workflows: it supports Webinar provisioning, hosted Webinar enrolment and post-event attendance only.

Provision

Create a Webinar from an approved brief, then read it back before HockeyStick treats the binding as verified. This release creates Webinars only; it never updates or deletes one.

Enrol

Send a consented registration from the HockeyStick-hosted Webinar page to Zoom and reconcile the registrant before any retry.

Reconcile

After the Webinar, match occurrence-scoped participation to the enrolment and calculate attendance evidence.

Not part of this release. The integration does not access Zoom recordings, AI Companion summaries or account-wide administration. It does not update or delete a Zoom Webinar. Adding AI Companion summaries later would require an updated permission declaration and reauthorization.

Before you connect

Prerequisites

An active HockeyStick AI engagement with Activate enabled, and a designated integration contact who can sign in.
A Zoom Workplace account and a paid Webinar licence assigned to the authorizing host.
The authorizing host must be the engagement's designated integration contact.
Where Zoom app controls are enabled, an administrator may need to pre-approve HockeyStick AI first.
For Production, use a Zoom account not already connected to another HockeyStick engagement.

Install from HockeyStick

Connect from your engagement

Sign in, open the correct engagement, then go to Activate → Strategy & setup → Integrations and select Connect with Zoom. In the horizontal Activate bar, select the gear icon under Measure & improve (accessible name Strategy & setup); scroll the bar if needed. It opens Partnership strategy first. Select Integrations inside it.

Sign in to HockeyStick AI. An unauthenticated visitor cannot select an engagement from a public page.

Open the engagement and go to Activate → Strategy & setup → Integrations.

Select Connect with Zoom. Only the designated contact can start this. HockeyStick creates short-lived, single-use state bound to the engagement, stores only its SHA-256 hash and redirects to Zoom.

Review and approve in Zoom. Confirm the app name, the eight permissions below and the licensed host. In Production, the account must not already be connected to another engagement.

Wait for verification. HockeyStick reads the connected user, validates the permissions and queues an account check before the connection is shown as ready.

No public OAuth shortcut. This page never creates authorization state or links directly to Zoom authorization. Start in the authenticated engagement every time. Sign in to HockeyStick AI →

Webinar lifecycle

Create, bind and reconcile

When an authorized user confirms Create Zoom webinar, HockeyStick sends the approved timing and configuration once, records the returned Webinar identity, then performs an exact authenticated read-back. A Webinar is not treated as verified until the returned identity and expected configuration reconcile; an ambiguous result stays visible for review and HockeyStick does not blindly create another Webinar. Editing the plan in HockeyStick afterwards does not push a change to Zoom: this release has no Webinar update path.

A participant registers on the HockeyStick-hosted page with first name, last name, email and consent; HockeyStick checks Zoom's registrant list, adds the person when needed and reconciles the enrolment. Private attendee links are delivered through the registered email or retrieved privately by the licensed host in Zoom. The public form does not disclose them, and HockeyStick does not store them. After the event, HockeyStick reads the completed occurrence's participant timing, matches to enrolments by Zoom registrant identifier, calculates watch time and flags ambiguous matches for review. That reconciliation runs on the scheduled integration pull — every 15 minutes, with a full pull daily at 01:00 UTC — and only after the Webinar's scheduled end time has passed. Refresh from Zoom in Registrations · from Zoom also refreshes eligible Webinars across the engagement, with a shared 60-second cooldown; attendance is refreshed only after each Webinar's scheduled end. Inspect its completion and this Webinar's results. Zoom reports can arrive later; partial results retain useful data.

The registration snapshot shows approved totals by HockeyStick or direct Zoom source, with pending and denied counts separate. Direct entries use Registered on Zoom without names or emails. Attendance · from Zoom shows all-registrant and enrolled counts, host exclusion, Verified evidence, Latest observation and retained successful data. See the reviewer test plan for exact steps and the usage guide for unavailable, stale and partial results.

Removal

Disconnect, remove or reconnect

Disconnect from HockeyStick: Activate → Strategy & setup → Integrations → Revoke Zoom. HockeyStick removes local authorization material immediately and asks Zoom to revoke the access token when no other active engagement shares the account.

Remove from Zoom: Zoom has already removed the app before it sends the signed app_deauthorized event, so HockeyStick does not call Zoom's revocation endpoint again. It removes local grants, pending state, direct Zoom identifiers and legacy recording links, and marks every affected engagement as requiring authorization. Zoom-derived person data is deleted or anonymized within 24 hours of that event. See the privacy policy for the full lifecycle.

Exact initial declaration

Requested permissions and why

user:read:user

Identify the authorizing Webinar hostConfirms which licensed host connected Zoom and which Zoom account owns the authorization.

webinar:read:list_webinars

List the host's WebinarsFinds Webinars owned by the connected host so HockeyStick can reconcile provider state.

webinar:read:webinar

Read one WebinarReads back the exact Webinar HockeyStick created or bound before treating it as verified.

webinar:write:webinar

Create a WebinarCreates one approved Webinar for the connected host with the timing and configuration confirmed in HockeyStick. This is the only use of this permission; the release does not update or delete a Zoom Webinar.

webinar:write:registrant

Add hosted-Webinar registrantsEnrols a person who submits the HockeyStick-hosted Webinar registration form.

webinar:read:list_registrants

Confirm enrolment and refresh the rosterChecks the registrant list before and after enrolment to avoid blind duplicate writes, and reads complete approved, pending and denied registrations for the source-labelled snapshot.

webinar:read:list_past_instances

Identify the completed Webinar occurrenceReads ended occurrence identifiers and start times for the linked Webinar so attendance is matched to the correct session.

webinar:read:list_past_participants

Reconcile post-event attendanceReads participant timing for the completed occurrence so attendance can be matched and measured.

Deferred: no AI Companion summary permission is requested by this release.

Support

Get help

Use the Hockey Stick Advisory contact form for Zoom integration support. Support is staffed 24 hours a day, 7 days a week, including public holidays, and the target is an initial human response within 24 elapsed hours of receipt. That is a target for a first reply from a person, not a resolution time, and an automated acknowledgement does not satisfy it.

Provide your name, organisation and a safe reply address, the engagement and Webinar identifier, the issue type, the approximate time and any visible error. For a security incident, begin the message with SECURITY; for a privacy request (access, correction, deletion, consent), begin with PRIVACY.

Never send a password, one-time code, access or refresh token, client secret, private join link or full participant list.