With auto-provisioning, all newly registered users within your corporate domains are routed to your Enterprise subscription and get access to your company's assets.
Miro Enterprise provides several provisioning options, either by invitations, Just-in-Time provisioning (JIT), System for Cross-domain Identity Management (SCIM), or Domain control.
Available for: Enterprise Plan
Invitations
You can invite users to your subscription using the Invite members button on your dashboard.
Invitations are sent immediately and do not require any additional setup.
Learn more about the ways you can share your work in Miro by visiting Manage invitations on Enterprise Plan and Sharing boards and inviting collaborators.
The option to invite members on Miro dashboard
Just-in-Time provisioning (JIT)
JIT provisioning works with Single Sign-on (SSO) to automatically capture all newly registered users with corporate SSO domains to a particular team in your Enterprise Plan.
JIT provisioning can easily be enabled in your Miro SSO settings. Learn how to set up SSO.
Enabling Just-in-Time (JIT) provisioning in SSO settings
System for Cross-domain Identity Management (SCIM)
SCIM works with Single Sign-on (SSO) and allows you to automatically provision and manage users of your Enterprise Plan through your Identity Provider (IdP).
With SCIM enabled, you can add users to particular teams and remove them, update user details and emails, and deactivate and reactivate users from within the Identity Provider of your choice.
SCIM automates the exchange of user information between Miro and your IdP, allowing you to manage employee access to your Enterprise Plan centrally from the IdP.
Learn more about SCIM features, and review the configuration steps for Azure AD, OKTA, or OneLogin.
SCIM provisioning in Miro SSO settings
Domain control
Domain control lets you automatically capture newly registered users into your Enterprise subscription, restrict the ability of corporate users to create their own Miro subscriptions, and track the activity of users in your domain.
With Domain control, you can set a provisioning rule for your corporate users:
- newly registered users in your domain can request access to your subscription
- newly registered users in your domain automatically join your subscription
- newly registered users in your domain automatically join your subscription and users in your domain are not allowed to create new Miro teams
Domain control in Miro Security settings
How licensing works
When inviting new users, Company Admins can choose a license for the invitee depending on their subscription setup.
Users invited by non-admins, or automatically provisioned to your subscription via JIT, SCIM, or Domain control, will be assigned the default license:
- for plans with non-flexible licensing (non-FLP): the default license is a Full license (if the organization has insufficient Full licenses, auto-captured users will get Free Restricted licenses)
- for plans with the Flexible Licensing Program (FLP): the default license can be Free or Free Restricted
✏️ Learn more about our Enterprise licensing models, License management on the Flexible Licensing Program, how to manage license allocation and upgrades with Request management, and how to track license usage with Software asset management.
Frequently asked questions
Does Domain control, with the option to capture new users enabled, activate the same feature as JIT (forcing users with certain domains to join a default team in an Enterprise subscription)?