You are viewing limited content. For full access, please sign in.

Question

Question

Assigning Participant License - AD Group

Forms Licensing Version 9
Updated August 28, 2015
asked on June 4, 2015 • Show version history

With Forms 9.2, it seems I can assign Participant Licenses to an AD group through LDAP.  Does this simply allocate licenses one-time to the users that are contained in the group, or will this update licenses automatically as users are added/removed from the AD Group?

After a change to the AD group membership, it only seems to update assigned licenses when I manually allocate licenses to that LDAP group again.

0 0

Answer

SELECTED ANSWER
replied on June 4, 2015

That is correct. As per the help file here,

"The list of named users is automatically synchronized with the Laserfiche Server, LDAP server, and AD server at a given time interval (specified on the Forms Configuration page). Users are also synchronized between Forms and Active Directory, the Laserfiche repository, or LDAP any time the following happens:"

and near the bottom,

"To allocate or remove licenses from a participant

  • To allocate or remove a license from an individual user, use drop-down menu in the License column. Select Yes to allocate a license to the user, selectNo to remove a license from the user.
  • To allocate or remove licenses from a several users at once, select the checkboxes next to a user and click the Allocate license or Remove licensebutton at the top of the list."

Users that are removed from the group, will be marked as "invalid" and thus have their license removed. But new users will not be automatically assigned a license. They will show up within the list, but will be left with a default of "no" license until assigned otherwise.

Hope this helps.

0 0

Replies

replied on June 4, 2015

Hello Josh, 

 

If you click the help link here, it will direct you to the help file. Specifically, if you scroll down to "Synchronizing users", it will explain how it works. I believe by default the sychronization from the FormsConfig page is set to 24 hours. So if you need it to sychronize sooner, you would just need to adjust the hour value there, or you can just manually press "Synchronize users"  manually after making the changes to the AD group. 

 

Hope this addresses your question and/or helps. 

0 0
View 4 previous replies
replied on June 4, 2015 • Show version history

My question is whether or not the licenses will stay synced with AD group membership or not. It doesn't seem to.

For example, I have an AD group "Laserfiche-Participants" and this group has 9 members. If I allocate participant licenses to this group it will allocate a license to all 9 users successfully. However, if this group has another user added in AD, when I manually Synchronize in Forms it still shows only 9 licenses allocated, not 10.  If I manually re-allocate licenses to that group it works fine.

I'd like to avoid having to manually re-allocate licenses to the group in Forms every time there's a change to the AD group membership.

0 0
replied on June 4, 2015

Yes it will stay synced. If you added an extra member to the AD group, Forms should synchronize.

What version of Forms are you using? If you select the top right drop down > About it should give you a full version, such as 9.2.0.XXX or 9.2.1.XXXX.

 

Also how exactly are you adding this AD group? Are you using pressing "+Add" or "Configure LDAP"?

0 0
replied on June 4, 2015 • Show version history

Version 9.2.1.1069

I've configured LDAP and I'm just searching for the group and selecting "Allocate License".

While I am manually clicking the "Synchronize Now" button, I did just notice in Forms Config, that I had the Account Synchronization Interval set to 1 hour, but still had the Synchronized Account Expiration set to 48 hours.  I changed it to 1 hour as well and I'll test the sync again after that period of time elapses shortly.

0 0
replied on June 4, 2015

Ah, I see what you mean, I apologize, as I misunderstood your question. Basically, the synchronization/manual synchronization will simply just bring in the users that are part of the configured group. It just ensures that at the time of synchronization, the correct members from within the configured group are either

a) brought in,

b) retained, or

c) marked as invalid if they were removed. 

Afterwards, you will need to follow up, and assign licenses to the corresponding new users. 

 

Hope this clarifies things.

0 0
replied on June 4, 2015 • Show version history

Afterwards, you will need to follow up, and assign licenses to the corresponding new users. 

So, to clarify, when you allocate licenses to an LDAP group, if there have been changes to the group in Active Directory since the last synchronization, licenses aren't dynamically added or removed from that group's users the next time synchronization happens?

0 0
SELECTED ANSWER
replied on June 4, 2015

That is correct. As per the help file here,

"The list of named users is automatically synchronized with the Laserfiche Server, LDAP server, and AD server at a given time interval (specified on the Forms Configuration page). Users are also synchronized between Forms and Active Directory, the Laserfiche repository, or LDAP any time the following happens:"

and near the bottom,

"To allocate or remove licenses from a participant

  • To allocate or remove a license from an individual user, use drop-down menu in the License column. Select Yes to allocate a license to the user, selectNo to remove a license from the user.
  • To allocate or remove licenses from a several users at once, select the checkboxes next to a user and click the Allocate license or Remove licensebutton at the top of the list."

Users that are removed from the group, will be marked as "invalid" and thus have their license removed. But new users will not be automatically assigned a license. They will show up within the list, but will be left with a default of "no" license until assigned otherwise.

Hope this helps.

0 0
replied on August 28, 2015

Is this something that could be added in the future? It would be really nice to have an AD called Laserfiche Forms License (or something similar) and just add/remove users from the group as necessary and have Forms automatically assign licenses.

2 0
You are not allowed to follow up in this post.

Sign in to reply to this post.

Details
Related Posts
Loading ...