Okta Integration: Common Questions on SAML, SCIM, and License Management

Questions

1. How to set up SCIM and retrieve the corresponding correct SCIM endpoint URL?
2. What happens to licenses when transferred from JetBrains Console to IDE Services License Vault?
3. Will users lose their licenses if inactive for a certain period?
4. Can licenses remain permanently assigned to users regardless of inactivity duration?

Answers

Setting up SCIM for JetBrains with Okta

To configure SCIM provisioning:

1. SCIM Endpoint URL:

   • Use the format: https://<instance>.oauth.jetbrains-ide-services.com/api/rest/scim2.
   • Ensure the token is generated from the URL: https://<instance>.oauth.jetbrains-ide-services.com/users/me?tab=authentication.
   • Ensure the token is included as a Bearer token in Okta SCIM configuration.

2. Detailed SCIM setup instructions are available here: SCIM Configuration Documentation.

3. Confirm proper group mappings in Okta: Group Mapping Documentation.

License Transfer and Management in License Vault

• Licenses in IDE Services are managed automatically by rules; there is no option for manual assignment to specific users. Rules control whether a group can access specific products.
• Transferring Licenses:
  • Moving licenses to License Vault revokes their manual assignment in JetBrains Console.
  • Users retain their activated licenses for up to three days without re-authentication. After this, the license is released for reallocation.

Inactivity and License Allocation

• Licenses are allocated only while the user is actively using the product. If the user is inactive for three days, the license is returned to the pool for reallocation. When this user reconnects, a license is reassigned if available.
• No method allows retaining a license for inactive users beyond this period. For uninterrupted access:
  • Post-paid licenses can accommodate unexpected usage.
  • Consider using the Floating Mode feature to return licenses within 20 minutes of IDE closure.

Permanent Assignment

• Permanent assignment of a license is not supported. Licenses are dynamically allocated based on availability.

Additional Resources

• License Vault Rules Documentation.
• SCIM Support in JetBrains Hub.
• Activating a License via License Vault.

Should further questions arise, review the provided resources or contact JetBrains Support for clarification.