Automatic license group membership when a new user is created

[Ben_A]

Does anyone know of a way to automatically place all new user accounts into a specific license group in Windchill 12? Currently we have to create the account in participant administration (Syncing it with our LDAP) and then take the extra steps of adding them to the 'PTC Navigate Contributor - Active Daily User License' group. Since this process is always the same, and occasionally forgotten, an automatic membership method  is preferable.

[jbailey]

• Create a group in LDAP that corresponds to the license you want to assign
• Add the user to the group in LDAP
• Create a group in Windchill that is assigned to the corresponding license
• add the LDAP group to the license group

[avillanueva]

@jbailey is that the same thing? Either way, you are assigning to a group. Would this not require some customization to trigger of a new user creation?

[jbailey]

It is likely easier to automate population of a group in LDAP vs in Windchill, but if you cannot automate it in LDAP it will be just as much work, just in a different tool 🙂

[mmeadows-3]

Don't we still have to deal with Recompute Groups?  Windchill only synchronizes groups with the LDAP once every 24 hours.  Not an issue if the new additions can wait until tomorrow to start working.  Otherwise, we have to write something to force the refresh by time or when the LDAP group is updated.

[jbailey]

Good call, I had totally forgot about that... PTC needs to get on board with SCIM. One thing I had suggested in the past was using attributes about a user in the saml assertion or the OIDC token to assign groups.. but they haven't got there yet