Lucidchart allows Enterprise admins to control how their users are Provisioned and subsequently given a License. This article will explore the differences between Auto Provisioning and Auto Licensing.
Auto Provisioning is available in a variety of forms through Lucidchart and your IDP. This functionality allows admin to create users in Lucidchart, but not determine their license type (Licensed vs. View Only) via these connections. If you are looking to determine License type via your SCIM connection, please navigate to the Auto Licensing Tab below for more info. In this scenario, user's licensing is determined by Lucidchart. See the last bullet in this section for specific details and implications for Licensing set up in the Admin Panel in Lucidchart.
- SAML implementations allow for Just In Time provisioning. This means users who are assigned access via your IDP and do not have a Lucidchart account, will have an account created for them upon their first log in. See the last bullet in this section for the implications of your Licensing settings on how users will request/receive a license
- SCIM allows administrators to create, update, and deactivate users in Lucidchart directly from your SCIM instance. SCIM creates users in your Lucidchart account without them having to log in. You can update user attributes via SCIM, and our connector lets you deactivate users so they do not have a license, can not log in, and do not have access to any documents. Once a user is deactivated you can delete them in Lucidchart and transfer their documents to another user of your choice. Please see the Transfer/Delete resource for more information. See the last bullet in this section for the implications of your Licensing settings on how users will request/receive a license.
- G-Suite allows GSuite Admin to roll out Lucidchart to your whole GSuite instance. If you do not specify a canEdit attribute in your provisioning section of GSuite,then Lucidchart will determine a users License type. See the last bullet in this section for the implications of your Licensing settings on how users will request/receive a license. Note: You are configuring GSuite, make sure you follow all the steps listed in our Gsuite set up article and THEN allow Google SSO as a sign on method in your Identity Management admin section in Lucidchart. Enabling Google SSO as a sign on method first without setting up GSuite will break domain lock down, so new users on your domain will not be directed to your target account and will be added as free users.
- Implications for Licensing set up in the Admin Panel in Lucidchart.. You can find these settings in your admin panel under the Licensing section. There are two scenarios for when users are created via a Provisioning actions. For more info on Licensing Settings please see the Help Center resource.
- If you want all users to come in as a full editing licensed user, you will need to set first Licensing option (When a new user joins a team...) to "Automatically Grant."
- If you want all users come is as view only, you will need to set first Licensing option (When a new user joins a team...) to "Do Not Automatically Grant."
Auto Licensing lets Admin determine what kind of License a user should get via SCIM. Users can receive either a full Editing license or a View Only license. This license type is determined by an attribute call canEdit.
- canEdit is a boolean attribute that we expect to either be true/false or not to be included in the user attributes.
canEdit = false (user gets a View Only license)
canEdit = true (user gets a Full edit license)
- The canEdit attribute is pre-built into the Okta and OneLogin SCIM connectors. You can also create your own SCIM application with these attributes if you have experience doing so. Take a look at the OneLogin and Okta set up resources for more information. If you are looking to build your own SCIM applications please reach out to your Customer Success Manager or submit a support ticket for more information.
- Implications for Licensing set up in the Admin Panel in Lucidchart when using canEdit. You will need to set first Licensing option (When a new user joins a team...) to "Do Not Automatically Grant." This setting ensures all users are not given a license after being created.
- Implications for users Requesting a License. If you have users being created as Licensed users this section is less important. If you want your users to come in a View only and then request a license from an Admin, you can set the second part of the Licensing options (When a user requests a license...) to have Admin approve the request. If you let all users receive a license automatically, the next time you make a change in your SCIM instance, license allocation will revert to reflect what your SCIm connection is sending over. Thusly stripping any autumnally assigned licenses. We strongly recommend that you have a custom request dialog if you have users requesting from an admin. The custom dialog can link to your internal software request page and contain any information you deem pertinent to your users. For more info on Licensing and Custom Dialogs please see the Help Center resource.
- Implications for Auto Grow. It is important to note that if you have licenses being auto assigned from your SCIM connection, you may at some point run out of Licenses. If you have "Auto Upgrade" (When no more licenses are available...) enabled, you will auto add licenses based on how many licensed users you have added. Please see the Auto Grow resource for more information on how your team will grow. If you have this option turned off once you have used all of your licenses, the remaining users that show as licensed users in your SCIM instance will go into a silent queue within Lucidchart so that when a license is freed up, that license is given to the first user in that silent queue rather than staying freed up for another user.