Lucidchart Onboarding in IDN

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hi team,

Has anyone tried onboarding Lucidchart in IDN here? What is your identifier for Full License access in LucidChart? and How did you provision a Full License access for a person via access profile?

Thank you. Hoping to get some clarity here.

2

Hi @CeeJ1

Didn’t work on Lucidchart integration yet, but I have looked into the connector.

I could see that Roles and Groups as entitlements, perhaps user get License based on these attributes. You can check that with your application team. They need to give you access model.

You just configure them at SailPoint.

– Krish

1 Like
3

Hi Krishna,

As per app owner they are not basing the license provisioning via groups or roles. I also actually tried to do provisioning by setting the canEdit ( attribute in Lucid ) to True and False thinking this might trigger the license provisioning but later that I have found out even if the user has no license he/she can still edit.

So right now I’m just lost on this. :sweat_smile:

4

Hi @CeeJ1!

I am not super familiar with how Lucid license management is handled or what the best approach would be for your situation, but I figured I’d try to help out as best as I can. After some research, I could find 2 possible options. It looks like considering switching to groups to manage licenses might be the simplest option.

  1. SCIM Management of the User object
    According to the Lucid SCIM Documentation, it looks like a user’s license status is controlled by the attribute, “urn:ietf:params:scim:schemas:extension:lucid:1.0:User”. I do not have API access to a Lucid API, so I cannot see what the acceptable values are for this attribute and it does not seem to detail them well in the documentation. The documentation just says this attribute, “Includes user’s license status in “productLicenses”.”. Perhaps you can query your instance’s API to see what the acceptable values are for licensed users. This field/value could be used as an entitlement in IDN to add/remove licensing.

  2. Set License Settings for Groups
    According to this section of the the Lucid Azure SCIM/SAML Documentation, once groups are created, license settings can be configured for each group. This documentation has Azure creating the groups, but I am making an assumption that locally created groups in Lucid can be managed the same way. Having groups in Lucid that grant licenses should allow the SCIM API to return these groups and you could then have IDN add/remove users to these groups, which would grant them their necessary license level.

I mentioned using groups to manage licenses (Option 2) would probably be the simplest option as you should be able to leverage the OOTB ISC-Lucid connector. Option 1 might require a custom Web Services/SCIM connector or extending the OOTB connector to include this custom attribute (which the connector documentation says it does support, I just cannot test this).

Please let me know if this helps!

  • Zach
2 Likes
5

Your application team should confirm on how they are handling the licenses.

They should add the licenses to Groups or Roles, preferably Groups just like how we manage in Azure AD.

Since we don’t have any attribute referring to license, they have to go with Group approach even if it is not the way they follow.

– Krish

1 Like
6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.