About account entitlements

Entitlements determine the number of users or credentials for your account. The number of entitlements available is also based on whether your account is a Trial account or a Production account.

Note: Accounts created before Identity as a Service release 5.8 are classified as Unknown accounts and are treated as Production accounts. Entrust recommends that you review your accounts and convert them to either Trial or Production accounts, as required. See Upgrade trial accounts.

Entitlement restrictions

Authentication account entitlements set limits to an Identity as a Service authentication account, including the number of users and OTP/voice credits. Identity as a Service uses account entitlements to confirm whether more users can be added to an account by comparing the current number of users to the maximum allowed in the entitlement. Entitlements are enforced whenever an attempt is made to add a user. If the maximum number of user entitlements is reached, the attempt to add a user is denied.

Trial account entitlements

● Trial accounts are available for 60 days with a maximum of 30 users.

● Trial accounts must be converted into Production accounts before the trial period expires.

● Once the trial period of an account expires, the account is automatically locked and it cannot be accessed.

● Trial accounts receive email warnings about account expiry 7 days, 3 days, and 1 day before the end of the trial period. When a trial account is created, the system enables email notifications using the first administrator email (see Settings > Notifications in the Administrator Portal and Manage notifications in the Administrator online help.)

Production account entitlements

● The entitlements given to a new tenant account cannot exceed those of the Service Provider account that created the Tenant account.

● Entitlements given to a tenant account are subtracted from the Service Provider's total number of available entitlements.

● When a tenant account is promoted to a Service Provider account, the tenant's existing entitlements can be sub-allocated to its tenants. For example, a regular tenant has 1000 user entitlements and has 10 users. The tenant is promoted to a Service Provider. The newly promoted tenant can allocate up to 990 entitlements to its tenant accounts.

● The following occurs if a user attempts to use in excess of their maximum entitlements

– If a manual attempt is made to add users that are in excess of the allotted entitlements, a message appears indicating that no more users can be added to the account.

If accounts are created through bulk operation, the user bulk import operation will succeed but row failures appear for each user account in excess of the account entitlements.

– If a directory synchronization attempts to add more users, no more users are added despite attempts from the directory synchronization.

SMS and Voice account entitlements

This entitlement grants tenants the ability to receive OTPs through SMS or Voice. Each SMS or Voice OTP delivered consumes a number of credits based on the country associated to the mobile or voice number defined in the user account. When a Tenant runs out of credits, SMS and Voice OTP will not be available.

The entitlement defines:

● Quantity—A numeric value that represents the number of SMS/Voice credits available. As OTPs are delivered, the credits consumed are subtracted from this amount.

● Entitlement period—This is fixed to one year. Once the end date is reached any credits not used are lost

● Renewal Quantity—Numeric value that represents SMS/Voice credits. When the entitlement period reaches the end date, the entitlement is automatically extended for another year with the quantity set to the Renewal Quantity value. The Renewal Quantity is reset to zero.

● Email OTP is always available in the following situations if the account user has a defined valid email address:

– Accounts without SMS and Voice credits

– Accounts with expired SM and Voice credits

– Accounts with no credits remaining for SMS/Voice OTP delivery

Entitlement summary

1. Log in to your Identity as a Service Tenant account. The Dashboard page appears. This page provides information about your Service Provider account. For example,

● The Users button shows the number users, including both Active and Inactive users. If you click the Users button, the Users list appears. Here you see the list of users and their state. Inactive users remain in the list but do not count toward to entitlement usage.

● The Entitlements button shows the number of entitlements available. If you click the Entitlements button, the Contract Details dialog box appears. This dialog box shows the total number of entitlements, the number used, and the number remaining. Inactive users do not count in the remaining entitlements field.

Example: The Users icon shows that you have two users. When you review the Users list you see that one user is active and the other is inactive. When you review the Entitlements (Contract Details), the Contract Details show that you have one consumed user entitlement and 29 remaining user entitlements. The inactive user does not count toward your entitlement usage.