Azure Active Directory (AAD) Automatic License Provisioning

This article explains how to automatically assign licenses using active directory (AD) groups. 

These instructions may vary depending on your environment. If you have specific settings, you may need to check those with your IdP admins as Foxit only supports this function as written in this article. 

Prerequisites: You must have SSO/SAML setup with Azure AD. 

1. Setup User Groups in Azure
2. Get Provisioning Credentials
3. Provision Azure App
4. Activate Provisioning

1. Setup User Groups

Products will be automatically assigned based on specific group names.

1.1. Create Azure AD user group(s) for the products you own and assign users to those group(s). See table below.

Note: Group names are case-sensitive. Groups MUST be named this way.

Here's an example: if you want to automatically assign licenses of Foxit PDF Editor PRO, you will need to create a group in AAD called "Group for Foxit PDF Editor Pro for Windows." And any user in that group will automatically receive a license of Foxit PDF Editor PRO.

1.2. Click on Users and Groups from the navigation panel and "Add user/group" then add your newly created groups

2. Obtain Provisioning Credentials

Open the Foxit Admin Console and navigate to Settings > Directory Settings > Directory tab

2.1. Click on Provision under the Actions section on the right

Now you will see the instructions screen, which will display the Tenant URL and Secret Token. We will need this on the next step. 

3. Provision Azure App

Now we will add Provisioning to your previously created Enterprise application in Azure. (The same app you used for SSO)

3.1. Select the Enterprise Application you created for SSO and choose Provisioning > Get Started.

3.2. Select Automatic as the Provisioning Mode

Enter the Tenant URL and Secret Token from Step 2.2

3.3. Click Test Connection to ensure Azure AD can connect to Foxit Identity Management.

If the connection fails, ensure your Azure Account has Admin Permissions to perform Provisioning and try again.

3.4. (Optional but highly recommended) Enter the email address of a person or group who should receive the provisioning error notifications and select the Send an email notification when a failure occurs check box.

4. Activate Provisioning and Check Status

4.1. Activate User Provisioning by clicking on Start provisioning

4.2. Go back to Foxit Admin Console and click OK on the screen shown in step 2.2.

Provisioning status will display.

All done, from now on Foxit Admin Console will automatically assign product licenses to group users based on the group names. 

For Existing SSO Foxit Apps created in Azure:

If you had SSO/ SAML previously configured to this update, you will need to assign that SSO app to the specific group.

You can do this by navigating to your Enterprise Application> selecting the SSO app you created for user directory sync and SSO/SAML. Navigate to Assign Application to User/ Group

Select the specific Foxit Product group you would like to provision.

Navigate to the Provisioning Tab> Restart Provision