Auto Provisioning and Auto Licensing

Lucidpress allows Enterprise admin to control how your users are Provisioned and subsequently given a License.  This article will explore the differences between Auto Provisioning and Auto Licensing.  

Auto Provisioning is available in a variety of forms though Lucidpress and your IDP. This functionality allows admin to create users in Lucidpress, but not determine their license type (Licensed vs. View Only) via these connections. If you are looking to determine License type via your SCIM connection, please navigate to the Auto Licensing Tab below for more info. In this scenario, a user's licensing is determined by Lucidpress. See the last bullet in this section for specific details and implications for Licensing set up in the Admin Panel in Lucidpress.

  • SAML implementations allow for Just In Time provisioning. This means users who are assigned access via your IDP and do not have a Lucidpress account, will have an account created for them upon their first log in. See the last bullet in this section for the implications of your Licensing settings on how users will request/receive a license.
  • SCIM allows administrators to create, update, and deactivate users in Lucidpress directly from your SCIM instance. SCIM creates users in your Lucidpress account without them having to log in. You can update user attributes via SCIM, and our connector lets your deactivate users so they do not have a license, can not log in, and do not have access to any documents. Once a user is deactivated you can delete them in Lucidpress and transfer their documents to another user of your choice. Please see the Transfer/Delete resource for more information. See the last bullet in this section for the implications of your Licensing settings on how users will request/receive a license.
  • G-Suite allows GSuite Admin to roll out Lucidpress to your whole GSuite instance. If you do not specify a canEdit attribute in your provisioning section of GSuite, then Lucidpress will determine a users License type. See the last bullet in this section for the implications of your Licensing settings on how users will request/receive a license. Note: When you are configuring GSuite, make sure you follow all the steps listed in our Gsuite set-up article and THEN allow Google SSO as a sign on method in your Identity Management admin section in Lucidpress. Enabling Google SSO as a sign on method first without setting up GSuite will break domain lockdown, so new users on your domain will not be directed to your target account and will be added as free users.
  • Implications for Licensing set up in the Admin Panel in Lucidpress. You can find these settings in your admin panel under the Licensing section. There are two scenarios for when users are created via a Provisioning action. For more info on Licensing Settings please see the Help Center resource.
    • If you want all users to come in as a full editing licensed user, you will need to first set the Licensing option (When a new user joins a team...) to "Automatically Grant".
    • If you want all users to come in as view only, you will need to first set the Licensing option (When a new user joins a team...) to "Do Not Automatically Grant."
  • Implications for users Requesting a License. If you have users bring created as Licensed users this section is less important. If you want your users to come in a View only and then request a license from an Admin, you can set the second part of the Licensing options (When a user requests a license...) to either Auto Grant when users request, or to have Admin approve the request. We strongly recommend that you have a custom request dialog if you have users requesting from an admin. The custom dialog can link to your internal software request page and contain any information you deem pertinent to your users. For more info on Licensing and Custom Dialogs please see the Help Center resource.
  • Implications for Auto Grow. It is important to note that if you have licenses being auto-assigned due to your licensing settings, you may at some point run out of Licenses. If you have "Auto Upgrade" (When no more licenses are available...) enabled, you will auto-add licenses based on how many licensed users you have added. If you have this option turned off once you have used all of your licenses, the remaining requests go into a silent queue so that when a license is freed up the license is given to the first user in that silent queue.

 

Auto Licensing lets Admins determine what kind of License a user should get via SCIM. Users can receive either a full Editing license or a View Only license. This license type is determined by an attribute call canEdit.

  • canEdit is a boolean attribute that we expect to either be true/false or not to be included in the user attributes.
    • canEdit = false (user gets a View Only license)
    • canEdit = true (user gets a full license)
  • The canEdit attribute is pre-built into the Okta and OneLogin SCIM connectors. You can also create your own SCIM application with these attributes if you have experience doing so. Take a look at the OneLogin and Okta set up resources for more information. If you are looking to build your own SCIM applications please reach out to your Customer Success Manager or submit a support ticket for more information.
  • Implications for Licensing set up in the Admin Panel in Lucidpress when using canEdit. You will need to first set the Licensing option (When a new user joins a team...) to "Do Not Automatically Grant". This setting ensures all users are not given a license after being created.
  • Implications for users Requesting a License. If you have users bring created as Licensed users this section is less important. If you want your users to come in a View only and then request a license from an Admin, you can set the second part of the Licensing options (When a user requests a license...) to have Admin approve the request. If you let all users receive a license automatically, the next time you make a change in your SCIM instance, license allocation will revert to reflect what your SCIM connection is sending over. Thus stripping any autumnally assigned licenses. We strongly recommend that you have a custom request dialog if you have users requesting from an admin. The custom dialog can link to your internal software request page and contain any information you deem pertinent to your users. For more info on Licensing and Custom Dialogs please see the Help Center resource.
  • Implications for Auto Grow. It is important to note that if you have licenses being auto-assigned from your SCIM connection, you may at some point run out of Licenses. If you have "Auto Upgrade" (When no more licenses are available...) enabled, you will auto add licenses based on how many licensed users you have added. If you have this option turned off once you have used all of your licenses, the remaining users that show as licensed users in your SCIM instance will go into a silent queue within Lucidpress so that when a license is freed up, that license is given to the first user in that silent queue rather than staying freed up for another user.
 
 
Was this article helpful?
1 out of 3 found this helpful
Fill out my online form.