SuccessFactors LMS Learning Management System
The question here is - anyone can access your content in your instance if they know the launch URL.
In other words, if a user hits the link to launch the content (i.e. eg - https://customer.plateau.com/<URL PREFIX>/index.html on the browser, he/she would be able to access it irrespective of the fact whether or not he/she is a valid LMS user.
The reason it is working in this way is because the entitlement service is not turned on in your instance.
There is a added security layer in iContent called the entitlement service which if used, only valid users would be able to access the content i.e. if they hit any link on the browser directly, they would be asked to login to LMS and only then the content would be presented to them.
KBA , LOD-SF-LMS , SuccessFactors Learning , How To