Skip to main content

Situation

You added an app to the AppStore and want people to be able to request an entitlement that doesn’t already appear in the Permissions tab. If the group/role is assigned to your app in your IdP and you’re just not seeing it in the Permissions tab in Lumos, click on the sync button and refresh the page once the sync completes.

Solution

Create a custom entitlement. In Lumos, you can create and attach entitlements for an app that don’t exist in the downstream app or IdP. This can be really helpful when you don’t want to create more groups or resources in your IdP or downstream application, but you still want people to be able to specify what they need in Lumos when they request access to an app.

Steps

1. Navigate to the AppStore settings for the app and click the _Permissions_tab.

Screenshot 2023-10-10 at 12.01.18 AM.png

2. Click the “+Add a permission” button

Screenshot 2023-10-10 at 12.02.28 AM.png

3. Give the entitlement a name and configure the settings

If you want to automatically add people to an IdP/email provider group after approval, set the Provisioning Group value.
Screenshot 2023-10-09 at 11.59.38 PM.png

4. Click Add permission.

5. Your new entitlement is ready to use

More information on setting up approval workflows for the entitlement can be found here:Setting Up Entitlement-Based Approvals
Screenshot 2023-10-10 at 12.04.52 AM.png
Your Provisioning Method settings in the AppStore need to be adjusted for people to be able to select the entitlement. See AppStore Configuration Settings