MentorU Zoom Reviewer Test Plan
A production-safe test path using a synthetic MentorU workspace and the Zoom review team's own test Zoom account.
Last updated: September 11, 2026
Reviewer access and safety
- Use only the synthetic MentorU owner and member credentials provided in Zoom's protected reviewer-instructions field.
- Authorize MentorU with the Zoom review team's own test Zoom account. MentorU does not provide or request Zoom account credentials.
- Do not use any customer workspace, customer record, or customer Zoom account.
- MentorU support cannot impersonate the owner or grant Zoom consent.
- The synthetic workspace uses an organization-controlled test Google Calendar connection so the review can exercise MentorU's normal Schedule flow without asking the reviewer to connect Google.
- Both supplied MentorU accounts have Advancement access and require no invitation or booking.
1. Connect with OAuth
- Open reviewer sign-inand use the synthetic recorded workspace owner credentials from Zoom's protected field.
- Open Workspace → Connections → Zoom. Choose Connect when Not connected, Reconnect when the connection needs attention, or Change Zoom account when already Connected.
- On Zoom, sign in with the review team's own Zoom test account, review the permissions shown by Zoom, and choose Allow.
- Verify Zoom returns to the synthetic managed workspace hostname and MentorU shows Connected without a separate resource-selection screen.
- Use Test read access and verify the authorized synthetic Zoom identity is shown.
2. Exercise meeting CRUD
- Open Workspace → Schedule → Calendar. On Calendar Events, choose Add Event. Enter a unique Event Title, set Start at least 30 minutes ahead and End at least 90 minutes ahead, and confirm the browser timezone shown below the fields. Under Minimum Tier Required, choose Advancement in the supplied reviewer workspace. Set Planned Duration (minutes) to the number of minutes between Start and End (for example, 90 for a 90-minute event).
- Set Session Delivery to Mentor Zoom, leave Repeat and Large interactive meeting off, and choose Create Event. Verify the new event appears with the Mentor Zoom badge and a Zoom URL in Location.
- Choose the pencil button labeled Edit event, change the title, save, and verify the meeting updates. If you also change the time, keep Planned Duration (minutes) equal to the interval between Start and End.
- Choose the trash button labeled Delete event for this synthetic event and verify MentorU deletes the corresponding Zoom meeting.
3. Test the embedded Meeting SDK
- Open Workspace → Schedule → Calendar → Add Event. Enter a new unique Event Title, set Start at least 30 minutes ahead and End at least 90 minutes ahead, and confirm the displayed browser timezone. Choose Minimum Tier Required: Advancement and Session Delivery: Mentor Zoom. Set Planned Duration (minutes) to match the interval between Start and End. Leave Repeat and Large interactive meeting off. Choose Create Event and verify the saved date and time. Keep this event until the embedded exercise and restart/rejoin are complete; do not delete it yet. Calendar Events and Add Event are the admin labels; the member navigation label is Sessions and its page heading is Member Calendar. Before opening Zoom, sign in as the member in a separate browser profile at https://mentoru.app/auth/zoom-reviewer. Open https://mentoru-zoom-marketplace-review.mentoru.app/members/calendar in both sessions, choose Refresh, and confirm both accounts see the exact event title before continuing.
- Keep the synthetic owner signed in. In the same browser, open the reviewer workspace's Member Calendar. Find the exact event title and choose Join Zoom. The admin Edit event button only changes event settings; it does not open the meeting.
- As the synthetic owner, complete Zoom's embedded pre-join screen and choose Join. Start with microphone muted and video off. Verify Participants identifies this account as Host. MentorU obtains a short-lived, user-associated ZAK for this exact authorized host. Keep this owner connected until the member test is complete.
- In a separate browser profile or private window, open reviewer sign-in and use the supplied synthetic member credentials. Open Sessions → Member Calendar, find the same event title, and choose Join Zoom only after the owner is present. Complete the embedded pre-join screen. Do not sign the owner out to switch accounts.
- If the connected Zoom account uses a waiting room, the owner admits only the synthetic member. After the member completes pre-join and is admitted, verify Participants shows Zoom Marketplace Review Owner as Host and Zoom Marketplace Review Member as an attendee. A successful embedded member join verifies the human member's SDK experience using the short-lived OBF token associated with the connected Zoom owner, who must already be present. The member does not need separate Zoom OAuth.
- Verify microphone, video, and Participants controls render inside MentorU. Open Chat opens MentorU's session comments. If the embedded SDK fails or reports an unsupported browser, verify the recovery banner offers Open in Zoom; external joining alone does not complete the embedded SDK test.
- Have the member choose Leave → Leave Meeting, then Back to Calendar → Join Zoom for the same event. Complete pre-join and have the owner admit the member again. Then have the owner choose End → End Meeting for All, return through Back to Calendar → Join Zoom for the same event, and complete pre-join to restart. After the owner is Host again, have the member return through Back to Calendar → Join Zoom and complete pre-join. The owner admits the member again if needed.
- Have the member leave, then have the owner choose End → End Meeting for All. Return to Workspace → Schedule → Calendar and delete only this synthetic event.
4. Reconnect, disconnect, and deauthorize
- While Connected, choose Change Zoom account using the same already-authorized Zoom test account. If Zoom shows consent, choose Decline, return to MentorU, and verify Connected plus Test read access with the same synthetic identity.
- Choose Change Zoom account again and choose Allow when consent appears. If Zoom returns without showing consent, verify Connected plus Test read access with the same identity; record this as a connection check, not cancellation proof.
- Choose Disconnect in MentorU and verify the connection becomes Not connected.
- Choose Connect once more and complete consent, then remove MentorU from Zoom App Marketplace: open My library, find MentorU, open its actions menu, choose Remove, and confirm Remove.
- Refresh MentorU and verify the connection is unavailable. OAuth credentials and Zoom-derived personal fields are deleted; secret-free audit evidence is retained under MentorU's published policy.
Scope-to-test map
user:read:user— Confirm the Zoom user who approved the connection.meeting:write:meeting— Create a meeting requested by the synthetic mentor.meeting:read:meeting— Display and verify the created meeting.meeting:update:meeting— Change the synthetic meeting title or time.meeting:delete:meeting— Delete the synthetic meeting.user:read:token— Obtain the host ZAK and member OBF through the user token endpoint for embedded hosting and attendance.user:read:zak— Required by the enabled Meeting SDK feature in Zoom Marketplace. The application token endpoint uses user:read:token.
Troubleshooting and cleanup
- No Upcoming Events: check the event's Start time and Minimum Tier Required. Member Calendar lists upcoming events the member can access; an old event still visible in admin may not appear there. Create a new future test event rather than reusing an expired one.
- Owner not present or waiting for host: start with the synthetic owner first, confirm Host in Participants, then reopen Join Zoom as the member. If the embedded join shows an error, choose Retry embedded for fresh authorization. Keep the owner connected throughout the OBF check.
- If Zoom starts cloud recording automatically, the owner stops it before continuing. Use synthetic participants and content only. Admit only the supplied synthetic member; leave unidentified AI/notetaker participants in the waiting room.
If a review step fails, record the event title, visible step, UTC timestamp, a safe screenshot, and the request ID when visible, then contact support@mentoru.app. Never send authorization codes, state values, cookies, passwords, or tokens. After review, delete only events created during this test while the Zoom connection is still active, then disconnect or deauthorize the review team's Zoom test account.
Returning reviewers: sign in at https://mentoru.app/auth/zoom-reviewer as the owner, open Workspace → Connections → Zoom, and choose Connect if Not connected or Reconnect if the connection needs renewal. While Connected, the consent button is Change Zoom account. Complete normal Zoom consent with the same test account. Create a new future event for each rehearsal; do not rely on an old demonstration event.
See the integration guide, Privacy Policy, Security and Data Protection Policy, and support page.