Zoom SAML mapping for licensetype

[sundari]

Hi Team,

When doing SAML integration with an IDP, how does the SAML mapping affect existing users.

In specific, if we are doing "Basic SAML mapping" option and choose "default licenseType" as "Basic".

 - When an existing licensed user login via SSO, would then the default license type overwrite their userType to Basic ?

- or does the default licensetype is applicable only for new user provisioning via JIT

If we have a mix of basic and licensed userTypes currently within Zoom, is choosing "Advanced SAML mapping" and have IDP send userType attribute in the SAML assertion is the only way ?

Thanks

[Bort · Accepted solution]

SAML mapping is applied to the user each time they login via SSO. So, if you have a user assigned a Pro license and then configure SAML mapping to have all users assigned "Basic", then when that user logs in via SSO, their license type will be changed to Basic. 

If you have a mix of both user types, you will want to use advanced SAML mapping to configure certain user groups to be assigned Basic, and others assigned Pro. 

Hope that helps and please make sure to mark the solution as accepted if this information is what you needed.

[cgbritton]

Hopefully bringing this back the top. In setting this up today with OneLogin all users are coming over only as basic. I have it set to bring them in as licensed in the basic SAML mappings and have also tried setting the userType attribute as well (to Licensed) with the action to set the account to licensed and still no change. Any help on this issue would be appreciated. Also having issues with the Personal Link Name coming over as well, but hopefully I can eventually find the format required for that (is it just the part after the vanity URL? Is it the entire URL? ) but the documentation for much of the SCIM setup is limited at best. 

[rranly1]

 Hello Sundari/Bort,

Bort's comment did not work as described for us. In "SAML Basic Information Mapping", "Default License Type" is set to "Licensed". We had a user SSO with "Type" "Basic" and their license type did not change. Sundari, did this work for you? Is there another admin setting needed to make this happen?

Thank you both for your time,

Ryan

[JNo1]

Hi all.  Default License Type is used the first time a user authenticates.  It will not work for existing users.  If the Default License Type is set as Licensed and an existing user that is a Basic user logs into Zoom, they will remain a Basic user.  If you would like the license type to change for existing users, you will need to utilize Advanced SAML Mapping.

[wibble]

We will also face this issue soon, can anybody from Zoom confirm this question?

My understanding is "default licenseType" only takes effect when a user is first-time created by JIT, won't overwrite user's license type stored in Zoom if this user already exists.

Could Zoom expert please confirm this?

Thank you.

[JNo1]

Hello.  You are correct that the default license type will not overwrite an existing user's license type.  Be well.

[wibble]

Thank you JNo1.