# Multiple Users with One Unique Url

**URL:** <https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698>\
**Category:** API and Webhooks\
**Created:** [November 18, 2019, 9:48am UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698 "2019-11-18T09:48:41Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![rohit](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohit/32/1714_2.png) [@rohit](https://devforum.zoom.us/u/rohit)\
**Post date:** [November 18, 2019, 9:48am UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/1 "2019-11-18T09:48:41Z")

</div>

Description-  
Multiple Users with One Unique Url should not be allowed.

I am facing issue when using API I register attendee as registrant then registrant gets an email of meeting details. here is the issue if user join the class and also share same url with other user with meeting password, then both are able to join the class. This should not be allowed?

How can I fix this?

And can you please provide me support contact or email so that I can question/ answes/ replies faster ?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [November 18, 2019, 5:58pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/2 "2019-11-18T17:58:51Z")

</div>

Hey @rohit,

A possible solution is to use the Participant Joined Webhook and each time a user joins the meeting, to check and see if that user is already in the meeting by comparing the `user_id`, `id`, and or the `name_name`. If the user is already in the meeting, then [remove them](https://support.zoom.us/hc/en-us/articles/115005759423-Managing-Participants-in-a-Meeting).

> **[Participant Joined - Meeting Events - Webhook Reference - API Reference](https://marketplace.zoom.us/docs/api-reference/webhook-reference/meeting-events/participant-joined-meeting)**
>
> Participant Joined
> 
> 
> 
> The "Meeting Participant Joined" event is triggered every time an attendee joins a meeting. The attendee could be a participant or...

As for our developer support email, it is [developersupport@zoom.us](mailto:developersupport@zoom.us), but I can’t guarantee you will get faster answers then posting here.

I will add “join only with unique url” as a feature request.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![rohit](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohit/32/1714_2.png) [@rohit](https://devforum.zoom.us/u/rohit)\
**Post date:** [November 18, 2019, 6:27pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/3 "2019-11-18T18:27:41Z")

</div>

How can i check user is already in meeting or not by participant joined webhook as attendee directly access your zoom url instead of my server url ?

---

<div class="post-metadata">

**Author:** ![rohit](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohit/32/1714_2.png) [@rohit](https://devforum.zoom.us/u/rohit)\
**Post date:** [November 18, 2019, 6:35pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/4 "2019-11-18T18:35:53Z")

</div>

I have read the documentation of participant joined webhook. But my question is user activity like join / exit / rejoin meeting all things I have to handle ??

Zoom does not keep track of user activity ?

Or Is there any way If attendee is joined meeting and with same url other attendee try to access previous one gets logged off from the session?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [November 19, 2019, 2:16am UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/5 "2019-11-19T02:16:03Z")

</div>

Hey @rohit,

You can try programmatically denying the user via:

> **[Update Meeting Registrant Status - Meetings - Zoom API - API Reference](https://marketplace.zoom.us/docs/api-reference/zoom-api/meetings/meetingregistrantstatus)**
>
> Update a meeting registrant's status by either approving, cancelling or denying a registrant from joining the meeting.
> Scopes: meeting:write:admin meeti...

This should kick out both users who used the same unique join\_url.

We also have notifications for Participant Left Meeting:

> **[Participant Left - Meeting Events - Webhook Reference - API Reference](https://marketplace.zoom.us/docs/api-reference/webhook-reference/meeting-events/participant-left)**
>
> Participant Left
> 
> 
> 
> A meeting participant can leave a meeting at any time. The "Meeting Participant Left" event is triggered every time an attendee leav...

So the flow would be:

1. [Participant Joined Webhook](https://marketplace.zoom.us/docs/api-reference/webhook-reference/meeting-events/participant-joined-meeting)
2. [Check if they are already in the meeting by comparing the user\_id value or the user\_name value between the webhook ^ and this endpoint](https://marketplace.zoom.us/docs/api-reference/zoom-api/dashboards/dashboardmeetingparticipants)
3. [If they are, deny them access](https://marketplace.zoom.us/docs/api-reference/zoom-api/meetings/meetingregistrantstatus)

EDIT: The [Update Meeting Registrant Status](https://marketplace.zoom.us/docs/api-reference/zoom-api/meetings/meetingregistrantstatus) does **not** kick a user from a meeting.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![rohit](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohit/32/1714_2.png) [@rohit](https://devforum.zoom.us/u/rohit)\
**Post date:** [November 19, 2019, 10:06am UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/6 "2019-11-19T10:06:23Z")

</div>

Thank you for the update.

Now I followed the same. Again the issue is **user\_id** and **id** parameter both are coming randomly for single unique url (registrant url) when try to join by multiple like to have one url accessing same url by multiple users. So here I cannot check the user existence in meeting with user\_id parameter.

And If i check the user existence by user name then it is also giving an issue as when registrant try to join the meeting zoom asks to enter your name so user can enter any name. And If same url accessing by other user he can put some other name as well.

Please help.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [November 19, 2019, 8:52pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/7 "2019-11-19T20:52:50Z")

</div>

Hey @rohit,

The unique join url should at least have the same `user_name` because it is set during the registration for the meeting.

Are your users using the [Zoom Web Client](https://support.zoom.us/hc/en-us/articles/214629443-Zoom-Web-Client) or the Zoom App?

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![rohit](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohit/32/1714_2.png) [@rohit](https://devforum.zoom.us/u/rohit)\
**Post date:** [November 20, 2019, 6:13am UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/8 "2019-11-20T06:13:33Z")

</div>

I am using zoom web client.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [November 20, 2019, 5:51pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/9 "2019-11-20T17:51:52Z")

</div>

Hey @rohit,

Thanks for the clarification. You can pass a username into the query param for the Zoom Web Client join url. Note that the username for `un=base64EncodedUserName` needs to be [base64 encoded](https://www.base64encode.org/).

`https://zoom.us/wc/{{meetindID}}/join?prefer=1&un={{base64EncodedUserName}}`

> [@Bypassing name entry with the join\_url](https://devforum.zoom.us/t/bypassing-name-entry-with-the-join-url/6629/2):
>
> Hey @edwinthinks, If you are wanting to use the [Zoom Web Client](https://support.zoom.us/hc/en-us/articles/214629443-Zoom-Web-Client) for the meetings, then you can use the following join url and prefill the users name via a query param instead of the name input page: https://zoom.us/wc/{{meetindID}}/join?prefer=1&un=RWR3aW4= “Edwin” = RWR3aW4= Make sure to [base64 Encode](https://www.base64encode.org/) the un value (which can be done programmatically in the coding language you use. Let me know if that works for your use case! slight_smile If you are wanting to have the registered user jo…

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![rohit](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohit/32/1714_2.png) [@rohit](https://devforum.zoom.us/u/rohit)\
**Post date:** [November 20, 2019, 6:24pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/10 "2019-11-20T18:24:59Z")

</div>

When I use [https://zoom.us/wc/{{meetindID}}/join?prefer=1&un=bmFtZQ==](https://zoom.us/wc/%7B%7BmeetindID%7D%7D/join?prefer=1&un=bmFtZQ==)  
link to join by browser, It is working fine. But the issue is if a user  
copy this url and with the help of code change the un parameter then he  
is also able to join the meeting, this should not be done.

Second case -

If  
attendee use this above url and pass url to someone and both entered in  
meeting. But with the help of participant web hook I can identify now by user\_name that this user is coming twice in meeting so I can deny the  
meeting access for them.

But here when I update meeting registrant status by api to deny they still able to join the meeting.

**Here lot of issues are coming because of improper documentation.**

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [November 20, 2019, 10:25pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/11 "2019-11-20T22:25:18Z")

</div>

Hey @rohit,

Moving forward let’s try to post in the topics that relate to your questions so we don’t double post:

> [@Bypass name enter page when join meeting](https://devforum.zoom.us/t/bypass-name-enter-page-when-join-meeting/6727/3):
>
> When I use [https://zoom.us/wc/{{meetindID}}/join?prefer=1&un=bmFtZQ==](https://zoom.us/wc/%7B%7BmeetindID%7D%7D/join?prefer=1&un=bmFtZQ==) link to join by browser, It is working fine. But the issue is if a user copy this url and with the help of code change the un parameter then he is also able to join the meeting, this should not be done. Second case - If attendee use this above url and pass url to someone and both entered in meeting. But with the help of participant web hook I can identify now by user\_name that this user is coming twice in meeting so I can de…

Since we currently don’t have a feature that limits joining a meeting with the same unique join\_url there is no perfect way to accomplish this. Bad users will always be able to change the url or share the password and join\_url. So unless you [enforce users to be logged in with Zoom to join via the Zoom Native Client](https://support.zoom.us/hc/en-us/articles/115002542483-Restrict-Access-to-Join-a-Meeting) there, like I said there is no perfect solution.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![rohit](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohit/32/1714_2.png) [@rohit](https://devforum.zoom.us/u/rohit)\
**Post date:** [November 21, 2019, 8:13pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/12 "2019-11-21T20:13:06Z")

</div>

Can i use jet token only for zoom web client.

Is there any requirement for oauth as well with jwt?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [November 21, 2019, 9:28pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/13 "2019-11-21T21:28:53Z")

</div>

Hey @rohit,

I am not sure what you mean. Can you please explain in greater detail and give me an example?

Thanks

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 7:04pm UTC](https://devforum.zoom.us/t/multiple-users-with-one-unique-url/6698/14 "2020-08-21T19:04:17Z")

</div>


