Sync licenses with Entra ID group membership
1 vote
If I'm missing something, i apologize, otherwise I'd like to have something along the lines of the following:
All users in our organization are able to access Devolutions Server via SSO and most don't have the need for any other license than WFM. We administer our licenses via en Entra ID group that has been enabled for auto-assign...my issue is when a user logs on to Devolutions Server prior to being a member of the Entra group that grants a license for e.g. Devolutions Launcher...The fact that I then add them to the Entra ID group does nothing within Devolutions.
Would it not be possible to enable some sort of sync from Entra ID that runs at an interval? That way I would be able to simply add the user to the Entra group and wait 5-10-15 minutes for the sync to happen and then a license is added to the user.
Hope the above makes sense :)
Thanks.
All Comments (3)
Hi @miccol,
This should already be possible using the Group Synchronization -> Synchronization schedule feature available in the User groups section. You can also select the option to unassign user licenses when they are disabled.
Cheers,
Luc Fauvel
a719ba15-8e6c-472b-8f59-a6f47ca8ef48.png
0e44daaa-d247-4284-9d1b-c57e5baebc44.png
Hi
I'm not sure it's working as intended.
This is my config:
Yet when I join an existing user to my Entra ID group that should assign a license to the user, it does nothing. I added a user to the Entra ID group earlier today but it's not working.
It's as if it only applied a license when "creating" the Devolutions user IF the user is at that point a member of the Entra ID group.
c7e89cd2-5e87-415d-bb51-1dec8bcfd152.png
Hi @miccol,
I also think that it should assign the license when the user is synced into the group via Entra. I've created an internal ticket to investigate this.
Cheers,
Luc Fauvel