This article explains how to automatically assign licenses using active directory (AD) groups.
These instructions may vary depending on your environment. If you have specific settings, you may need to check those with your IdP admins as Foxit only supports this function as written in this article.
Prerequisites: You must have SSO/SAML setup with Azure AD.
1. Setup User Groups
Products will be automatically assigned based on specific group names.
1.1. Create Azure AD user group(s) for the products you own and assign users to those group(s). See table below.
Note: Group names are case-sensitive. Groups MUST be named this way.
|User(s) in AD Group||Automatically Gets a License of Product|
Group for Foxit PDF Editor for Windows
|Foxit PDF Editor for Windows|
Group for Foxit PDF Editor Pro for Windows
|Foxit PDF Editor Pro for Windows|
Group for Foxit PDF Editor for Mac
|Foxit PDF Editor for Mac|
Group for Foxit PDF Editor for Mobile
|Foxit PDF Editor for Mobile|
Group for Foxit PDF Editor for Cloud
|Foxit PDF Editor for Cloud|
Group for Foxit eSign
Here's an example: if you want to automatically assign licenses of Foxit PDF Editor PRO, you will need to create a group in AAD called "Group for Foxit PDF Editor Pro for Windows." And any user in that group will automatically receive a license of Foxit PDF Editor PRO.
1.2. Click on Users and Groups from the navigation panel and "Add user/group" then add your newly created groups
2. Obtain Provisioning Credentials
Open the Foxit Admin Console and navigate to Settings > Directory Settings > Directory Sync
2.1. Click on Add Directory Sync
2.2. Select Sync users from Microsoft Azure Active Directory and click Save and Continue
Now you will see the instructions screen, which will display the Tenant URL and Secret Token. We will need this on the next step.
3. Provision Azure App
Now we will add Provisioning to your previously created Enterprise application in Azure. (The same app you used for SSO)
3.1. Select the Enterprise Application you created for SSO and choose Provisioning > Get Started.
3.2. Select Automatic as the Provisioning Mode
Enter the Tenant URL and Secret Token from Step 2.2
3.3. Click Test Connection to ensure Azure AD can connect to Foxit Identity Management.
If the connection fails, ensure your Azure Account has Admin Permissions to perform Provisioning and try again.
3.4. (Optional but highly recommended) Enter the email address of a person or group who should receive the provisioning error notifications and select the Send an email notification when a failure occurs check box.
4. Activate Provisioning and Check Status
4.1. Activate User Provisioning by clicking on Start provisioning
4.2. Go back to Foxit Admin Console and click OK on the screen shown in step 2.2.
Provisioning status will display.
All done, from now on Foxit Admin Console will automatically assign product licenses to group users based on the group names.
For Existing SSO Foxit Apps created in Azure:
If you had SSO/ SAML previously configured to this update, you will need to assign that SSO app to the specific group.
You can do this by navigating to your Enterprise Application> selecting the SSO app you created for user directory sync and SSO/SAML. Navigate to Assign Application to User/ Group
Select the specific Foxit Product group you would like to provision.
Navigate to the Provisioning Tab> Restart Provision