Automated License revoke

[Jacob64]

Dear all,

We are currently searching for a way to automate licenses.
We see that we come near the maximum of licenses we bought from servicenow but also see a lot of itil users that do use servicenow at all for a longer period.

Our idea is to revoke licenses on all users that did not login for example 3 weeks and restore the license as soon as they login again.
On other instances I saw a Not ootb way of doing that by revoking group members of groups that inherit a licensed role like "itil" or "Business Stakeholder" and register the group name is a customer table together with the moment is was revoked. This information was added to the user information for user admins making it possible for them to see if and when the license was revoked (and restored).

Besides creating the table and needed flields like revoked groupname, revoke date/time and restored date/time I assume I need to created 2 scripts that will do the revoking magic.

In my idea the first script should run on a daily base checking the last login date/time to be more than 3 weeks (or 21 days?) and if true than remove user from lisense group and add the name of the group to the new table with date/time.
Secondly there should run a script while logging in a user that checks the revoked user table checking for revoked groups. And if group is found then add user the the same group again and add the current time/ dat to that table again.

So that is what I have seen before (without looking at the actual scripts etc in detail), but to day i heared that there is also a "SAM productsuite that could do this for me.

Is anyone familiar with the mentioned scripts etc? 
And additional is the SAM productsuite known to any of you and is able to tell me where to find more information about this?

Many, many thanks in advance!!

Kind regards,
Jacob.

[John Anderson]

Hey Jacob,

We had a similar situation with our license count. You can easily use a Workflow and run it daily that checks the last login time on the sys_user table. If older than 'X" make 'active=false'. That's very binary I know but would give you the first part of your solution. We don't do this but that Workflow could write info to another table so that you could then take action to re-enable. 

For re-enabling we never got time to develop anything so we have a very slick process with our Service Desk who very quickly re-enable accounts. It's not ideal as the users have to call the Desk as, of course, they don't have access to the Service Portal.

[Jacob64]

Hi John,

Thanks for the suggestion. We already looked into that option.
But 'Active=false' is a bit to far for us. The user must stay visible and a disabled  user is not visible for request for the user and it does not actually remove the license (even though Servicenow wil not take it in account) 

Kind regards
Jacob.