To add a license for Advanced Authentication, perform the following steps:
Click Licenses.
Click Add.
Click Browse and select the valid license.
Click Upload to upload the license.
A user license is consumed when a user enrolls at least one authenticator through an automatic enrollment, enrollment by a Helpdesk administrator, or self-enrollment. This is an exception for the LDAP password, as a license is not consumed for it. An automatic enrollment is done only when a user performs a first authentication.
NOTE:If you have obtained a trial license before the trial version expires, ensure to purchase and apply a permanent license to provide an uninterrupted authentication.
After you add the license, following details of the license are displayed:
License ID
Expiry date
Restrictions: License type and applicable restrictions.
Usage: Total and Usage count of active users.
Your license might be limited to some specific authentication methods. Other methods will be unavailable in the Methods section.
IMPORTANT:If the multi-tenancy mode is enabled, you must add licenses for each tenant.
HINT:To free up a user's license, perform the following steps:
Exclude the user from a group that is assigned to chains.
Click Repositories and edit a repository.
Click Full sync to perform a full synchronization of the repository.
Wait for 20 minutes to remove the users who are marked for deletion. The existing user's authenticators are removed. This takes place if the Retain the deleted users or groups (days) option in the Users Synchronization Options policy is set to 0. However, it is strongly recommended to set this option with minimum value 30. The option is set to 60 days by default indicating the license will be freed after 60 days (+ up to 20 minutes).