With Miro auto-provisioning for Enterprise plan, you can make sure that all newly registered users within your corporate domains are routed to your Enterprise subscription and get access to your Company's assets. Miro Enterprise provides several provisioning options. The quick overview will help you determine how users should join your Enterprise subscription: via Invitations, JIT, SCIM, or Domain control.
Available for: Enterprise plan
Invitations
You can invite users to your teams and boards using the standard procedure - invitations are sent immediately and do not require any additional setup. Learn more about the ways you can share your work in Miro: Invite users on Enterprise plan, Sharing boards and inviting collaborators.
The option to invite members on Miro dashboard
Just-in-Time provisioning (JIT)
JIT works with SSO and automatically captures all newly registered users with corporate SSO domains to a particular team in your Enterprise plan.
JIT can be easily enabled in your Miro SSO settings. Check here how to set it up.
JIT in Miro SSO settings
System for Cross-domain Identity Management (SCIM)
SCIM works with SSO and allows you to automatically provision and manage users of your Enterprise plan through your Identity Provider (IdP). With SCIM enabled, you can add users to particular teams and remove them, update user details and emails, deactivate and reactivate users from within the Identity Provider of your choice. SCIM automates the exchange of user information between Miro and your IdP basically allowing you to manage your employees' access to your Enterprise plan centrally from the IdP.
Learn more about SCIM features and review configuration steps for Azure AD, OKTA, OneLogin.
SCIM provisioning in Miro SSO settings
Domain control
Domain control is a Miro Enterprise feature that makes it possible for Company Admins to automatically capture newly registered users into your Enterprise subscription, restrict the ability of corporate users to create their own Miro subscriptions, and track the activity of users in your domain.
With Domain control, you can set a provisioning rule for your corporate users:
- newly registered users in your domain can request access to your subscription
- newly registered users in your domain automatically join your subscription
- newly registered users in your domain automatically join your subscription and users in your domain are not allowed to create new Miro teams
Domain control in Miro Security settings
How licensing works
When inviting new users, Company Admins can choose a license for the invitee depending on the subscription setup. If your subscription is enrolled in Flexible Licensing Program (FLP), it is possible to select Free or Free Restricted license.
Users invited by non-admin members or automatically provisioned to your subscription via JIT, SCIM, or Domain control will get the subscription default license:
- for plans with no FLP (Flexible Licensing Program) - Full license. If the organization has insufficient Full licenses, auto-captured users will get Free Restricted licenses
- for plans with FLP - default FLP license (Free or Free Restricted)
✏️ If you have JIT/Domain control auto-capture enabled on your Enterprise plan, non-registered users with corporate domains who have been invited as free guests to some boards in the plan will get provisioned with the Free license when signing up with Miro, even if your default license is Free Restricted.
💡 Users with Free Restricted licenses can request a Full license in your subscription. Admins can configure the way they will be notified of these and other types of requests in Request Management settings.
💡 You can track and manage license usage in your subscription with Software Asset Management.
Frequently asked questions
-
Does Domain control with enabled option to capture new users activates the same feature as JIT (forcing users with certain domains to join a default team in an Enterprise subscription)?
- Yes, but Domain control doesn't require SSO to be configured for the Enterprise plan, it can work without SSO. - I want to ensure that auto-provisioned corporate users do not get Full licenses in the Enterprise subscription unless they actually start working on boards. Is it possible?
- Yes, it is possible with Miro Flexible Licensing Program. - Can I set up several provisioning options for my Enterprise subscription?
- Yes, you can use multiple provisioning options at the same time.