Secure and seamless data transfers for schools
Flyt Skole - External API
Gain access to students, employees, timetables and LMS data through a modern REST-API.
Innovation begins with a simple call
By integrating with our API, you eliminate time-consuming data cleansing and complex connections. The API enables you to deliver solutions that give schools streamlined processes and inspire students — without anyone ever needing to touch the source code again.
The possibilities with the API
Work with Employee Data
- Retrieve all employees in a municipality or search by name
- Fetch detailed info by person ID or national ID number (NIN)
- Access employee positions, group memberships, and access roles
- Create and update employees and their positions
Manage Pupil Information
- Fetch lists of all active students
- Filter by level, class, first/last name, and moved or deceased status
- Get individual pupil info by NIN
Access Group and School Structure
- Retrieve group information (e.g., class, subject, SFO groups)
- See all group members by role (student, parent, employee)
- Update existing groups (e.g. name, notes, activation)
Export to Learning Managment Systems (LMS)
- Export school data in three formats:
- PIFU (used in Norway for school-LMS integration)
- IMS
- ABC
- Targeted for vendors like Identum, .NET Internals, and others
Subscribe to Event Changes
- Pull-based access to recent changes in:
- Pupils
- Guardians
- Employees
- Groups
- Group memberships
- Supports change detection and synchronization use cases
Retrieve Municipality Metadata
- Subjects used in the current academic year
- Municipality-wide access groups and their rules
- Information about the owning organization
Manage Access Control
- Retrieve and manage employee access groups by school or globally
- Add/remove access groups for employees to control login permissions and visibility in Flyt Skole
Framework and Guidelines
Legal and Compliance
The API adheres to all relevant Norwegian and EU regulations, including:
- GDPR: All data processing follows the General Data Protection Regulation (EU) 2016/679.
- Data Processing Agreements: In place for all customers and partners.
- Data Retention: Data is stored only as long as required by regulation or contract.
- Access Control: Role-based access and application-level scoping to prevent unauthorized data usage.
- Auditability: All access is logged and traceable.
Terms of use and processor agreements are available through the customer’s service agreement with Flyt Skole.
Security
We take information security seriously. Key elements of our security model include:
- Encryption: All data is encrypted in transit (TLS 1.2+) and at rest.
- Authentication: OAuth 2.0 with client credentials for secure system-to-system communication.
- Token Control: Access tokens are short-lived and scoped per tenant.
- Breach Notification: In accordance with GDPR Article 33, customers will be notified of any data breaches within 72 hours.
- Environment Separation: Strict separation between test and production data.
Security documentation and third-party audit reports are available upon request.
Use Case Overviews
The Flyt Skole – External API enables a wide range of use cases, including but not limited to:
- School-to-system integration: Connecting Flyt Skole to LMS, HR, or finance systems.
- Data extraction for reporting and analysis: Secure access to time schedules, student records, and more.
- Municipal ecosystem coordination: Enabling external vendors (e.g. LMS or identity providers) to integrate with Flyt Skole through scoped access.
- Automation: Replacing manual export routines with live data access from verified systems.
Governance and SLA
Are different. Let them all be individuals. Let's make some happy little clouds in our world.
Support Model
- API Support: Available through our support portal in Visma Community for partners and municipal IT teams.
- Incident Response: Severity-based escalation procedures in place.
- Documentation: Continuously maintained and updated at developer.minflyt.no.
Availability and Performance
- Production SLA: 99.9% uptime guarantee.
- Sandbox: Available for development and testing, with a separate usage quota.
Change Management
- API changes follow a versioning strategy (see documentation) and are announced in advance.
- We maintain backward compatibility within major versions.
- Deprecated features are phased out with minimum 6 months' notice.