Licensing
In the Management Portal at Setup > Licensing, you manage your licenses and gain insight in your license usage.
Before users qualify for any service and can sign in to the Web Portal and Clients, they need to be licensed.
- Identity Director uses Named User licenses. These are based on the number of Active people in your environment: each active person requires one license.
- People listed as Inactive do not require a license. They do not qualify for any service and cannot sign in to the Web Portal and the Clients.
- Identity Director claims licenses from the Datastore to which an environment connects. This can also be an Ivanti Automation Datastore.
License usage
Identity Director displays graphs for license usage per day (previous 30 days) and per month (previous 12 months).
In these graphs, all Active People are counted as a used license, even if no license is available for them. In the Management Portal, go to People for an overview of all people in your environment, and their status.
Based on the license usage graphs, you can decide to adjust your number of licenses.
License types
Evaluation licenses
When you install Ivanti Identity Director, 25 evaluation licenses are available that are valid for 45 days. To use Identity Director after the evaluation period, you need production licenses (Enterprise, Identity or Access licenses).
- You can buy production licenses at your reseller.
- If necessary, contact [email protected] (for EMEA) or [email protected] (for US) to extend the evaluation period.
- Evaluation licenses offer the same service delivery functionality as Enterprise licenses.
Identity licenses
This license limits service delivery to automated service delivery scenarios only. It disables functionality related to self-service.
Available trigger options for services when using Identity licenses
Start Delivery trigger
|
Field |
Available |
|---|---|
|
When people qualify (auto provisioning) |
Yes |
|
Skip delivery for currently qualified people |
Yes |
|
Only for newly qualified people |
Yes |
|
When qualified people request the service (self servicing) |
No |
|
When one of the following person attributes of a qualified person has changed |
Yes |
|
When subscribers still qualify after organizational change (reprovisioning) |
Yes |
|
Skip return workflow |
Yes |
Start Return trigger
|
Field |
Available |
|---|---|
|
When subscribers no longer qualify (auto deprovisioning) |
Yes |
|
When subscribers cancel the service (self service) |
No |
|
As soon as subscribers are marked for deletion |
Yes |
|
As soon as service has been delivered (auto deprovisioning) |
Yes |
The following functionality is NOT available:
- Login Page Services from the Web Portal, the Mobile Client and the Windows log on page. This functionality is also not available in the Management Portal at Setup > Login Page Services.
- Request and return services from the Management Portal; you can only assign and unassign services.
- Delegated Administrations in the Web Portal. This functionality is also unavailable in the Management Portal at Setup > Delegated Administration.
Access licenses
This license limits service delivery to self-service delivery scenarios only. It disables functionality related to automated provisioning.
Available trigger options for services when using Access licenses
Start Delivery trigger
|
Field |
Available |
|---|---|
|
When people qualify (auto provisioning) |
No |
|
Skip delivery for currently qualified people |
No |
|
Only for newly qualified people |
No |
|
When qualified people request the service (self servicing) |
Yes |
|
When one of the following person attributes of a qualified person has changed |
No |
|
When subscribers still qualify after organizational change (reprovisioning) |
No |
|
Skip return workflow |
No |
Start Return trigger
|
Field |
Available |
|---|---|
|
When subscribers no longer qualify (auto deprovisioning) |
No |
|
When subscribers cancel the service (self service) |
Yes |
|
As soon as subscribers are marked for deletion |
Yes |
|
As soon as service has been delivered (auto deprovisioning) |
Yes |
Although this license type disables the service trigger options related to automated delivery, it does not disable the functionality of the actions Cancel Another Service and Request Another Service, even though they are basically automated service deliveries and returns.
Password Reset licenses
This license limits service delivery to the Login Page Services Password Reset and Unlock Account only.
Available functional areas in the Management Portal when using Password Reset licenses
|
Area |
Available |
|---|---|
|
Dashboard |
Yes |
|
Entitlement Catalog |
Yes |
|
People |
Yes |
|
Organization |
Yes |
|
Data Connections |
Yes |
|
Transactions |
Yes |
|
Audit Trail |
Yes |
|
Data Model |
Only the following sections are available:
|
|
Setup |
Only the following sections are available:
|
Enterprise licenses (legacy)
This license offers full service delivery functionality, same as when Identity and Access licenses are combined. It is packaged with an Ivanti Identity Director license file and an Ivanti Automation Desktop Automation license file.
License distribution
Licensing is maintained by the Transaction Engine. When you add an active person to your environment, the Transaction Engine checks if a sufficient number of licenses is available in the Datastore:
- Sufficient number of licenses: The person claims one license.
- Insufficient number of licenses: The person gets the status No license available and does not qualify for any service until a sufficient number of licenses is available. Unlicensed users cannot sign in to the Web Portal and the Clients.