IDN Lite Licensing

Hi,

How would I be able to calculate Lite licenses in transforms in IdentityNow? Since the criterion to enter this type is to have up to 5 accounts in applications (except authoritative bases), and I didn’t find any counter in the transform types.

1 Like

Hello @camilamoreira,

Welcome to the developer community!

I am not sure that a transform will be the best solution here. Can you provide more details and example values of what you are expecting to output?

Hello @tyler_mairose,

Thank you for your response and welcome!
We need to identify which identities will adhere to each license type, we currently use the following rule:
Active account on authoritative basis = Licensed identity
Inactive account on authoritative basis = Unlicensed identity

However, an update appeared, where we were able to use the Lite-type license, which respects the following criteria:
Active account on authoritative basis and has up to five linked accounts on identity = Identity lite
Active account on authoritative basis and has more than five accounts linked on identity = Licensed identity
Inactive account on authoritative basis = Unlicensed identity

**IdentityNow accounts and authoritative basis should not be included in the license count.

The difference between the scenarios is that previously it was not necessary to identify the accesses to define the type of license, and now I need to know the status of the account and which accesses it has in IdentityNow to understand how to classify it.

I can filter this action via Search, but I didn’t find a way to do it via transform, since I didn’t find any Counter-type transform.

Hope this helps, please let me know if you need any more information.

How do you grant the license to users? Is this via a role, access profile, or entitlement? Or do you set an identity attribute to indicate the identity should have the license?

Per @tyler_mairose , I don’t think transforms are the right approach here. They won’t be able to query how many accounts an identity has. If you are granting this license via an access item (role/AP/entitlement), then you could possibly leverage Workflows to automate an access request based on the criteria you mentioned. If the license must be specified via an identity attribute, then I think the only option is to create a rule.

Hi @colin_mckibben,

We use a field in the Identity Profile called “License Status (licenseStatus)” and in it we check the license type via transform.

In that case, you’ll need a rule. Transforms can only use account attributes or identity attributes as their input, and they have no mechanism for querying IdentityNow to see what other accounts an identity might have.

Here is the rule guide for Cloud Execute Rules, which is the route I think you need to take here. Once you have a rule in place, I think you can use the rule transform to reference it on your license attribute.

Even in Identity attribute rule you do not have any way to get number of accounts any identity holds. We are limited to methods provided by OOTB idn object which has methods listed in this page.

The only option I see is create webservice source, call idn apis to get extra attribute which gives number of accounts identity has and use that in transform(substract 2 from that number).