none
FIM CAL for disabled users? RRS feed

  • Question

  • Hi,

    According to the FIM licensing guide:

    "For each user for whom the Forefront Identity Manager software issues or manages identity information, a CAL is required."

    So is a CAL required for a user who has left the organisation, but for legal reasons, the account will remain in FIM/AD/etc for 5 years (as a disabled account).

    Thanks,

    SK

    • Changed type Shim Kwan Monday, January 26, 2015 10:23 PM
    Sunday, January 25, 2015 10:34 PM

Answers

  • On Mon, 26 Jan 2015 04:51:10 +0000, Paul Adare wrote:

    I'm checking on this for you but one possible solution to avoid requiring a
    CAL here is to remove the portal account for disabled users. They can still
    be managed by the Synch service, they just won't be in the portal.

    Good news, the answer is that since these former employees are no longer
    "affiliated" with the company no CALs are required.


    Paul Adare - FIM CM MVP
    Systems programmers are the high priests of a low cult. - R. S. Barton

    • Marked as answer by Shim Kwan Monday, January 26, 2015 10:23 PM
    Monday, January 26, 2015 5:25 AM

All replies

  • On Sun, 25 Jan 2015 22:34:10 +0000, Shim Kwan wrote:

    "For each user for whom the Forefront Identity Manager software issues or manages identity information, a CAL is required."

    So is a CAL required for a user who has left the organisation, but for legal reasons, the account will remain in FIM/AD/etc for 5 years (as a disabled account).

    I'm checking on this for you but one possible solution to avoid requiring a
    CAL here is to remove the portal account for disabled users. They can still
    be managed by the Synch service, they just won't be in the portal.


    Paul Adare - FIM CM MVP
    Fachbegriffe der Informatik, Telefon: Gerät, das die Person am anderen
    Ende der Leitung bescheuert macht. (Funktioniert in beide Richtungen)

    Monday, January 26, 2015 4:51 AM
  • On Mon, 26 Jan 2015 04:51:10 +0000, Paul Adare wrote:

    I'm checking on this for you but one possible solution to avoid requiring a
    CAL here is to remove the portal account for disabled users. They can still
    be managed by the Synch service, they just won't be in the portal.

    Good news, the answer is that since these former employees are no longer
    "affiliated" with the company no CALs are required.


    Paul Adare - FIM CM MVP
    Systems programmers are the high priests of a low cult. - R. S. Barton

    • Marked as answer by Shim Kwan Monday, January 26, 2015 10:23 PM
    Monday, January 26, 2015 5:25 AM
  • Hi Paul,

    I had the same confusion.

    Am I correct in assuming that no CAL is required for disabled users?

    Thanks,

    Mann



    • Edited by Mann.Cool Monday, January 26, 2015 11:04 AM
    Monday, January 26, 2015 11:03 AM
  • On Mon, 26 Jan 2015 11:03:34 +0000, Mann.Cool wrote:

    I had the same confusion.

    Am I correct in assuming that no CAL is required for disabled users?

    No, that's not the deal here. The reason that no CAL is required in Shim's
    case is that the disabled accounts are for users who are no longer employed
    by the company in question.

    If a disabled user account was associated with someone who is still
    employed by the company then a CAL would be required.

    The no CAL requirement is not tied to the fact that we're dealing with
    disabled accounts, it is tied to the fact that the person with whom the
    account is associated is no longer with the company. If the person to whom
    the account is associated is no longer an employee, the account could be
    active and no CAL would be required.


    Paul Adare - FIM CM MVP
    Programming is like sex: One mistake and you're providing support for
    a lifetime. -- ?

    Monday, January 26, 2015 11:17 AM
  • Thanks Paul!
    Monday, January 26, 2015 11:33 AM
  • thank you Paul
    Monday, January 26, 2015 8:09 PM