DanielB.03232 (Customer) asked a question.
My organization doesn't keep a bundle of extra licenses around for some of our applications. What happens if provisioning is setup for an application and there are no additional licenses available? Will I be given prompts to approve more licenses or do I need to go into the application and obtain the licenses first?
When you provision a user to an app, many (not all) will allow you to assign licenses for the user. This is the case with Office 365, G Suite, and Salesforce provisioning. The way provisioning works is Okta sends an API call to the service provider's API with a request to update the user's licenses. If the available licenses have been exceeded, then the remaining experience is determined by the service provider side. So it really depends on the app.
Having worked with Office 365, G Suite, and Salesforce, I know that they will reject the request and say you don't have enough licenses. What that would look like in Okta is there would be a profile push showing in the System Log, it would fail, a task would show up in your Okta admin dashboard, and the task would state there was a failed profile push and contain the response received from the service provider, usually something like "insufficient licenses" and maybe even an error code. But keep in mind, Okta is just showing the response from the service provider. To Okta, a license is just another attribute in the app profile. Okta doesn't have any special awareness about licenses in apps.
At that point, you would need to go to the service provider and acquire additional licenses. Currently, you cannot purchase licenses from service provider through Okta. After you acquire additional licenses, you can then retry the task and it would likely go through.
We use cookies to provide the best website experience and to help understand marketing efforts. We may also share data with ad partners to reach potential customers across the web. To learn more, visit our Privacy Policy. Click here for Your Privacy Choices. You may also opt out of this sharing by signaling your preference via GPC, applicable only to the browser signaling the opt-out.
More information
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Select All
We use cookies to provide the best website experience and to help understand marketing efforts. We may also share data with ad partners to reach potential customers across the web. To learn more, visit our Privacy Policy. Click here for Your Privacy Choices. You may also opt out of this sharing by signaling your preference via GPC, applicable only to the browser signaling the opt-out.
More information
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Select All
May Okta Community Buzz
Stay ahead of the curve with Okta for AI Agents, new Okta Learning live sessions and labs, shout-outs, and top trending topics—all aimed at enriching your Okta journey.
When you provision a user to an app, many (not all) will allow you to assign licenses for the user. This is the case with Office 365, G Suite, and Salesforce provisioning. The way provisioning works is Okta sends an API call to the service provider's API with a request to update the user's licenses. If the available licenses have been exceeded, then the remaining experience is determined by the service provider side. So it really depends on the app.
Having worked with Office 365, G Suite, and Salesforce, I know that they will reject the request and say you don't have enough licenses. What that would look like in Okta is there would be a profile push showing in the System Log, it would fail, a task would show up in your Okta admin dashboard, and the task would state there was a failed profile push and contain the response received from the service provider, usually something like "insufficient licenses" and maybe even an error code. But keep in mind, Okta is just showing the response from the service provider. To Okta, a license is just another attribute in the app profile. Okta doesn't have any special awareness about licenses in apps.
At that point, you would need to go to the service provider and acquire additional licenses. Currently, you cannot purchase licenses from service provider through Okta. After you acquire additional licenses, you can then retry the task and it would likely go through.