Forum Discussion

JM's avatar
JM
Meteor
17 days ago

Reporting on Max amount of licenses reached

It's rather embarrassing to run out of SDP licenses as it provides for a negative new joiner experience when their Cato connection won't come up as expected.

As Cato in their wisdom has decided there is no need to alert admins when the license count is reached (they'd probably rather we waste money purchasing a sufficient surplus of said licenses), is there a way to use the API to query for this status?

Yes, I submitted an RMA for this last year that went nowhere. And yes, I know we can probably hack something together on our end that statically compares the number of licenses to the membership count in our provisioning groups. But this feels like it should be a basic feature of a SaaS service, especially as there is a hard stop when the license count is reached.

3 Replies

  • LiorR's avatar
    LiorR
    Icon for Cato Employee rankCato Employee
    15 days ago

    Thanks for raising this. You're absolutely right that running into a hard stop on ZTNA licenses creates a poor experience for new joiners, and we take this seriously.


    We do have an API endpoint that can help you monitor license consumption:
     ZtnaUsersLicenseAllocations in the CMA API. This can be used to query current usage and allocation status, and could serve as the foundation for proactive monitoring on your end.

    That said, you're also right that this kind of visibility and alerting shouldn't require DIY solutions. We're actively exploring improvements to the license management experience, including smarter allocation models and built-in alerts when you're nearing license limits — both to prevent surprises and to give admins more confidence in planning.


    Appreciate you resurfacing this and giving us a chance to do better.

    • JM's avatar
      JM
      Meteor
      15 days ago

      Appreciate the API pointer, I believe I can hack something together based on this. But again, this should be a native alert (as I recall it was before we switched to SCIM provisioning).

      • LiorR's avatar
        LiorR
        Icon for Cato Employee rankCato Employee
        15 days ago

        Thanks for the follow-up. I totally agree that this should be a native alert. Just to clarify, it wasn’t available even before SCIM, but we’re actively exploring ways to build better visibility and notifications into the platform.