With Miro auto-provisioning for Enterprise plan, you can make sure that all newly registered users within your corporate domains are routed to the correct Miro account and get access to your Company's assets. Miro Enterprise provides several provisioning options. The quick overview will help you determine how users should join your account: via Invitations, JIT, SCIM, or Domain control.
Available for: Enterprise plan
In this article:
- Invitations
- Just-in-Time provisioning (JIT)
- System for Cross-domain Identity Management (SCIM)
- Domain control
- How licencing works
- Frequently asked questions
Invitations
You can invite users to your teams and boards via the standard procedure - invitations are sent immediately and do not require any additional setup. Learn more about the ways you can share your work in Miro: Invite Users on Enterprise plan, Sharing Boards and Inviting Collaborators.
The option to invite members on Miro dashboard
Just-in-Time provisioning (JIT)
JIT works with SSO and automatically captures all newly registered users with corporate SSO domains to a particular team in your Enterprise account.
JIT is easily enabled in your Miro SSO settings. Check here how to set it up.
JIT in Miro SSO settings
System for Cross-domain Identity Management (SCIM)
SCIM works with SSO and allows you to automatically provision and manage users of your Enterprise account through your Identity Provider (IdP). With SCIM enabled, you can add users to particular teams and remove them, update user details and emails, deactivate and reactivate users from within the Identity Provider of your choice. SCIM automates the exchange of user information between Miro and your IdP basically allowing you to manage your employees' access to the Miro account centrally from the IdP.
Learn more about SCIM features and study configuration steps for Azure AD, OKTA, OneLogin.
SCIM provisioning in Miro SSO settings
Domain control
Domain control is a Miro Enterprise feature that makes it possible for Company Admins to automatically capture newly registered users into your Enterprise account, restrict the ability of corporate users to create their own Miro subscriptions, and track the activity of users in your domain.
Domain control can be configured on three levels:
- newly registered users in your domain can request access to your account
- newly registered users in your domain automatically join your account
- newly registered users in your domain automatically join your account and users in your domain are not allowed to create new Miro accounts.
Domain control in Miro Security settings
How licensing works
When inviting new users, Company Admins can choose a license for the invitee depending on the subscription setup. If your account is enrolled in Flexible Licensing Program (FLP), it is possible to select Free or Free Restricted License. On accounts with Day Passes, you are given a choice between Full and Occasional license.
Users invited by non-admin members or automatically provisioned to your account via JIT, SCIM, or Domain control will get the subscription default license:
- for accounts with no Day Passes and no FLP (Flexible Licensing Program) - Full license
- for accounts with Day Passes and no FLP - Occasional license
- for accounts with FLP - default FLP license (Free or Free Restricted).
💡 Users with Free Restricted licenses can request a Full license in your account. Admins can configure the way they will be notified of these and other types of requests in Request Management settings.
💡 You can track and manage license usage in your account with Software Asset Management.
Frequently asked questions
-
Does Domain control with enabled option to capture new users activates the same feature as JIT (forcing users with certain domains to join a default team in an Enterprise account)?
- Yes, but Domain control doesn't require SSO to be configured for the Enterprise account, it can work without SSO. - I want to ensure that auto-provisioned corporate users do not get Full licenses in the Enterprise subscription unless they actually start working on boards. Is it possible?
- Yes, it is absolutely possible with Miro Flexible Licensing Program. Learn more. - Can I set up several provisioning options for my Enterprise account?
- Yes, you can use all provisioning options at the same time.