Integrations

It joins the systems you already pay for

Integrations install as Apps. Each declares typed contracts — what it supplies, what it reads, what it writes — and the platform enforces them. An App never touches the core schema directly, which is what keeps an integration from quietly becoming a dependency you cannot remove.

How Apps work

Six contracts, declared before install

Before an App is enabled, an administrator can read exactly what it will do: which entities it reads, which it writes, and which actions it adds. Nothing is discovered afterwards.

Identity source

Supplies people. Multiple sources can contribute to one person; field priority decides who wins each attribute, and disagreements land in a conflict queue instead of overwriting silently.

SSO

Authenticates people. Group claims map to roles at login through the same rule engine the core SAML integration uses.

Device sync

Supplies devices and their state, reconciled against the asset register with configurable matching and lifecycle rules.

In-product actions

Adds buttons to records — lock this Chromebook, start a remote session. Every invocation is audited with the actor.

Data egress

Declares exactly which entities the App reads and writes, in which direction. The declaration is visible before you install.

Service status

Reports upstream health into the status monitor, with suppression rules so a known outage does not flood the helpdesk.

Two systems will disagree about a person. PowerSchool says one email, Entra says another, and one of them is stale. CampusLink treats that as a resolvable conflict with a queue and a decision, rather than as whichever sync ran last.

The catalogue

What ships with the platform

Fifteen first-party Apps, installed and configured from /Apps by an administrator — no deployment, no vendor ticket.

PowerSchool SIS

Student information

Students, staff, guardians, courses, sections and class rosters, pulled through a signed CampusLink plugin installed in PowerSchool. Plugin and connector ship as a version-matched pair, and the connector refuses to run outside the window it was tested against. Also handles cohort history, site linking and grade promotion requests with admin approval.

Identity sourceRostering

Google Workspace (Identity)

Directory

Users and groups from Google Workspace into the core directory, through the same reconciliation engine every other identity source uses.

Identity source

Google Workspace (Devices)

Devices

Chromebook inventory sync with per-state lifecycle handling, and Quick Lock, Re-enable, Deprovision and Lost Mode commands dispatched from the asset record. Serial-versus-asset-tag matching rules are configurable, because every district labels differently.

Device syncIn-product actions

Google SSO

Authentication

Google Workspace as a SAML 2.0 identity provider, SP-initiated.

SSO

Microsoft Entra ID

Directory

Users and groups from Entra, optionally restricted to a single group, plus SAML sign-in with group claims mapped to CampusLink roles. Just-in-time provisioning is opt-in and always runs through reconciliation.

Identity sourceSSO

Microsoft Intune

Devices

Windows managed-device inventory, with Quick Lock, Locate, Reboot, Retire and Wipe available from the asset record.

Device syncIn-product actions

ClassLink

Rostering

OneRoster federation that defaults to link-only: it attaches ClassLink and OneRoster identifiers to people who already exist rather than creating new accounts. Terms, classes, teachers and enrolments come across for the sessions that cover today. Sign-in from the ClassLink launchpad via SAML.

Identity sourceSSORostering

Cisco Meraki

Network

Last-seen location, access point and connection history for a device, looked up by MAC from the Meraki Dashboard API. Surfaced on the asset panel — which is how a missing laptop stops being a mystery.

Device lookup

MeshCentral

Remote support

Remote desktop sessions against a self-hosted MeshCentral server, launched from an asset or a ticket rather than from a separate console.

In-product actions

Chrome Remote Assistance

Remote support

A Start Remote Session button on helpdesk tickets for managed Chromebooks. Every click is written to the audit log.

In-product actions

PaperCut

Printing

Print balances, quotas and recent job history on user profiles and tickets, with per-user quota adjustment and printer inventory.

Data egressIn-product actions

Policy Manager

Compliance

Distribute district policies — AUP, BYOD, FERPA, code of conduct — with versioning, acceptance tracking, an acceptance banner, automated reminders and compliance reports.

Workflow

Vendor Status Monitor

Operations

Aggregates vendor status pages (Statuspage.io, Statuspal, Better Stack, RSS) into one surface, with a district banner and helpdesk ticket suppression — so a Google outage does not generate two hundred tickets your team has to close by hand.

Service status

Stripe

Payments

Checkout for asset damage fees and facility rental invoices, with mark-paid and refund handled inside the module that raised the charge.

Payments

CampusLink Sentinel

Mass notification

A signed, read-only bridge feeding buildings, rooms and staff to the Algo intercom and mass-notification platform, plus an idempotent inbound sink for drill, alert and device events. HMAC-SHA256 per request with a replay cache; credentials are issued and disabled from the admin UI.

Directory bridgeEvent sink

Your own systems

When the SIS is one we do not ship

Districts run systems nobody anticipated. There are three ways in, and all three are scoped by the permissions of whoever set them up.

  • API tokens. Scoped REST access, capped at the issuing user's own permissions, revocable from the admin UI.
  • Webhooks, both directions. Outbound deliveries signed with HMAC-SHA256 and retried by the background worker; inbound endpoints verified, with a delivery log you can read.
  • A connector we build. Where the API and webhooks genuinely will not stretch, we scope and quote a first-party App against the same contracts — which then ships to every district rather than becoming your private fork to maintain.

What operators actually watch

Three admin surfaces exist because integrations fail quietly, and a sync that stopped three weeks ago is worse than one that never ran.

  • Sync queue Every identity and device job, its state, and a retry button.
  • Identity conflicts Cross-source disagreements waiting on a human decision.
  • Status monitor Upstream vendor health, incidents and ticket suppression.

CampusLink is independently developed by Melton Electronics and is not affiliated with, endorsed by, or sponsored by any of the vendors named on this page. Product names are used only to identify the systems CampusLink integrates with, through each vendor's published interfaces. All trademarks are the property of their respective owners.

Tell us what you run

Send the list — SIS, directory, MDM, print, access control. We will say plainly which are supported today, which need an App, and which are genuinely a problem.