This article explains how to assign SDP Licenses to your users so they can connect to Cato remotely, or in some scenarios be identified behind a site with User Awareness
Note: This article provides information for Single User Identity. For more information about the Single User Identity changes, see .
After users are provisioned or created in your Cato account, they can be assigned a SDP license. Only users with a SDP license can connect to Cato remotely.
In addition, in these scenarios, a SDP license is required for User awareness to identify a user behind a site:
On a macOS device
On a Linux device
Users provisioned with an IdP other than Azure
For more information, see Using Cato Identity Agents for User Awareness.
You can assign licenses to all users or only assigned to specific users, User groups, or System groups.
System groups can only be used for assigning licenses and cannot be used in policies.
A company has finance, marketing and product development teams working in its head office in New York. The company also has sales teams working remotely in 20 different states. Teams working in the head office connect to Cato through a Socket and are not assigned an SDP license. The sales teams connect to Cato through the Windows Client and are all assigned SDP licenses. The company is able to ensure that policies are enforced to all users, and so that all teams are able to securely access network resources.
A company uses Okta as its IdP to manage the identity of over 1,000 employees. So that the company can identify, control access, and monitor the activity of their users, the company assigns SDP licenses to all users. After the license is assigned, the Cato Identity Agent identifies each user and the company can enforce relevant identity based policies.
You can manage assigning SDP licenses to all your users (whether they are provisioned with SCIM or LDAP, or created manually) from the License Assignment page. You can also monitor how licenses are assigned in your account, for example by viewing how many users have a SDP license.
To assign SDP licenses:
From the navigation menu, click Access > License Assignment.
Define how licenses are assigned in your account. The options are:
Assign SDP licenses to all users
Assign SDP licenses to a selected group
If you are assigning SDP licenses to a selected group, select the users or groups from the drop down.
Note: All manually created users are included in the All Manual Users System group. To automatically assign manually created users a SDP license, add this System group to the License Assignment table.