Automatic license provisioning (ALP) automatically allocates licenses of Redgate products to users based on groups synced from your identity provider, removing the need to manually allocate licenses in the Portal.

Once enabled:

• Allocations to users who are members of the selected groups(s) will be created when they log in to their tools.
• Allocations to users who are not members of the selected group(s), or who have been deleted or disabled from the source directory, will be revoked.
• Organizational admins will still be able to manually assign or unassign users to these licenses.
• Licenses opted into ALP will become owned and managed by your organization, rather than the previous license owners and administrators.

Prerequisites

• Single-sign on (SSO) is configured for Redgate apps. See Single sign-on for Redgate apps for instructions on how to configure this.
• Users and groups have been synchronized from your identity provider. See Manage Users with SCIM Provisioning for set-up instructions.
• You must have the organization admin role in your organization.

Supported licenses

To be provisioned via ALP, a license must be an in-support subscription and user-based license.

How to set up ALP

1. Navigate to https://portal.red-gate.com/settings

2. Click the '+ Provisioning rule' rule button in the Automatic license provisioning section.

3. Enter a name for the provisioning rule and select the product to provision. Note that the name of the rule will be surfaced to other organization admins.

4. Choose whether to include all licenses for the selected product or to choose specific ones. Note that choosing "Any" here will opt-in all currently available licenses, but licenses that become available later (e.g. from a new purchase) will have to be manually opted-in.

5. If selecting "Choose", select the licenses to provision from the drop-down menu. Only licenses that are eligible for ALP and not in another provisioning rule are shown in this drop-down.

6. Select the groups to be assigned to the provisioning rule. All groups synchronized via SCIM will be available here.

7. Click the continue button to advance to the preview stage.

8. The changes that will be made a result of creating the rule are listed now.

• "No change" indicates that the user was already allocated to a license in the pool and will continue to be afterwards. Note that their allocation will be converted to an automatic allocation.
• "Eligible" indicates that the user is not currently allocated, but after creating the rule will be automatically allocated the next time they log in to their tool.
• "De-allocate" indicates that the user is currently allocated to the license, but isn't in any of the groups assigned to the rule, so will be de-allocated when the rule is created. 

If any of the changes here are not acceptable, it is possible to go back and make changes to the rule. Otherwise, click the continue button again to create the rule.

9. If the changes are acceptable, click 'Continue' to create the rule, otherwise go back and make changes to the rule.

10. Click 'Done' to close the wizard.

The created provisioning rule will now show on the settings page. From here, it can be toggled on or off (which controls whether new automatic allocations will be created), edited and deleted.

Going forward:

• Users who are members of the selected group(s) and who are already allocated are unaffected.
• Users who are (or become) members of the selected groups will be eligible to automatically be allocated a license when they log into the tool.
• Users who were allocated to the license before the rule was created, but are not members of the selected group(s) will lose their allocations.
• Users who leave the groups in a provisioning rule, or are deactivated/deleted by SCIM, will lose their automatic allocations.

Deleting and Disabling Rules

Provisioning rules can be deleted by clicking the red "X" next to the rule. Deleting a provisioning rule converts all allocations under the rule to manual allocations, and frees up the licenses for use in other rules.

Provisioning rules can be disabled and re-enabled by using the toggle to the left of the rule name. Disabling a provisioning rule prevents new automatic allocations under the rule, but does not affect existing allocations.