Resco licensing service: Difference between revisions

Latest revision as of 09:37, 2 December 2025

Security Guide
Resco Trust Center Security bulletin Resco Mobile CRM security Client and server communication Backend security considerations Resco licensing service Enterprise security Mobile device management Enterprise deployment on iOS Security model Glossary entry for Security NCCGroup Security Report Download

The Resco Mobile CRM client access license is validated online by the Resco licensing service. Licenses are controlled during synchronization. For this purpose, the mobile application sends organization-specific information, such as server organization ID and user unique ID, to Resco licensing service. This information is also stored in the encrypted local database just like all the other data.

A typical request looks like this:

<MobileClient>
    <Version>6.1.0.0</Version>
    <Edition>Resco</Edition>
    <DeviceId>45d780e4f18354949676f743b0h11633951652bc</DeviceId>
    <DeviceInfo>iPad 2 Wi-Fi only (iPad2,1) iPhone OS 6.0</DeviceInfo>
    <OrganizationId>4F767AFF-B33F-437C-A7CB-00249948C82B</OrganizationId>
    <OrganizationUrl>https://testcrm.resco.net</OrganizationUrl>
    <OrganizationName>testcrm</OrganizationName>
    <UserId>661BAC34-1128-40B1-9653-00B9F54158CD</UserId>
</MobileClient>

Manage licenses

Select Mobile Users from the Administration menu of Woodford to manage users and licenses.

Note	Resco Cloud licenses are not stored on Resco Cloud organization database, they only exist on iservices. In order to see licenses offline enable Offline licenses.

Offline licenses

For deployment scenarios where the Resco licensing service is not reachable from client devices, an offline license can be stored on your backend server. Still, the OrganizationId, OrganizationUrl, and UserId must be supplied for an offline license to be issued.

Automatic assignment of licenses is not possible for offline licenses. Use the Mobile users section of Woodford to assign licenses to all users, then click Update to save the licenses to your backend server. If you don't see the Update button, contact Resco sales and ask them to enable offline licenses for your organization.

Offline licenses are available for Dynamics and Resco Cloud backends.

License check

The app tries to contact the primary licensing server (https://iservices.resco.net). This server is located in western Europe.

If the server cannot be contacted, the app then checks for offline licenses stored on the backend server.

Finally, if there are no offline licenses, the app tries to check the license on a backup server (https://iservices.rescocrm.com), located in central US. This is a read-only copy of the primary server. It cannot be used to assign new licenses.

Whitelisting

If you are using a VPN, firewall, or other tools to block network traffic, we recommend whitelisting the FQDNs rather than the IP addresses of the licensing servers. In release 18.0, we have changed some related configuration, see Important: Whitelist new Resco web services for details.

IP addresses

Some network infrastructure can require IP addresses rather than domain names. The IP addresses are managed by Microsoft Azure and may change over time. You can download them from Microsoft: https://www.microsoft.com/en-us/download/details.aspx?id=56519

Alternatively, you can download the list of FQDNs and IP addresses from Resco in JSON format. This download also includes the IP addresses for outbound communication. It is cached and updated every 4 hours.

https://svc-dev.resco.net/network/allowlist (temporary list)
https://svc.resco.net/network/allowlist (future permanent list)

Notifications

The licensing server sends notification mail to all Woodford administrators whenever a license is automatically assigned to a mobile user.

In the Account details section, find information about the organization where the license was assigned. The license is connected to the Organization Id, other parameters are just informative.
In the Mobile User Licenses section, see the numbers of total, used, and available licenses.
In the User details section, find the user ID. The message does not include the username because the licensing server does not have access to CRM data, and also to protect privacy in accordance with GDPR.

If the mail is difficult to read in your email client, click the appropriate link at the bottom of the message to display the content in a web browser.
The link to unsubscribe is also available here. It takes you to the Manage your notification subscriptions page that lists all the organizations where you connected as a Woodford administrator OR where a different admin entered your email address. You can subscribe or unsubscribe on this screen.

Alternatively, to subscribe to notification emails or manage addresses for a particular organization, log in to Woodford, go to Administration > Settings and enable Send licenses assignment notifications. You can also edit the email address(es).

@@ Line 1: / Line 1: @@
-The [[Resco Mobile CRM]] client access license is validated online by Resco licensing service (https://iservices.resco.net). When the main licensing server is unavailable, a backup server is used automatically (https://iservices.rescocrm.com).
+{{Security TOC}}
+The [[Resco Mobile CRM]] client access license is validated online by the Resco licensing service. Licenses are controlled during [[synchronization]]. For this purpose, the mobile application sends organization-specific information, such as server [[organization ID]] and user unique ID, to Resco licensing service. This information is also stored in the encrypted local database just like all the other data.
-For this purpose, the mobile application sends the server organization specific information, such as server organization ID and user unique ID, to Resco licensing service. This information is also stored in the encrypted local database just as all the other data.
+A typical request looks like this:
-A typical request looks like this
 <syntaxhighlight lang="XML"><MobileClient>
@@ Line 15: / Line 15: @@
 </MobileClient></syntaxhighlight>
-For deployment scenarios where the Resco licensing service is not reachable from client devices, an offline license can be stored in the CRM organization (in the entity resco_mobilelicense). Still the OrganizationId, OrganizationUrl, and UserId must be supplied for an offline license to be issued.
+== Manage licenses ==
+Select '''[[Mobile users|Mobile Users]]''' from the '''Administration''' menu of [[Woodford]] to manage users and licenses.
+{{Note|Resco Cloud licenses are not stored on Resco Cloud organization database, they only exist on iservices. In order to see licenses offline enable Offline licenses.}}
+== Offline licenses ==
+For deployment scenarios where the Resco licensing service is not reachable from client devices, an offline license can be stored on your backend server. Still, the OrganizationId, OrganizationUrl, and UserId must be supplied for an offline license to be issued.
+Automatic assignment of licenses is not possible for offline licenses. Use the [[Mobile users]] section of Woodford to assign licenses to all users, then click '''Update''' to save the licenses to your backend server. If you don't see the Update button, contact Resco sales and ask them to enable offline licenses for your organization.
+Offline licenses are available for Dynamics and [[Resco Cloud]] backends.
+== License check ==
+The app tries to contact the primary licensing server (<code><nowiki>https://iservices.resco.net</nowiki></code>). This server is located in western Europe.
+If the server cannot be contacted, the app then checks for offline licenses stored on the backend server.
+Finally, if there are no offline licenses, the app tries to check the license on a backup server (<code><nowiki>https://iservices.rescocrm.com</nowiki></code>), located in central US. This is a read-only copy of the primary server. It cannot be used to assign new licenses.
+== Whitelisting ==
+If you are using a VPN, firewall, or other tools to block network traffic, we recommend whitelisting the FQDNs rather than the IP addresses of the licensing servers. In release 18.0, we have changed some related configuration, see [[Releases/Winter_2025#Important:_Whitelist_new_Resco_web_services|Important: Whitelist new Resco web services]] for details.
+=== IP addresses ===
+Some network infrastructure can require IP addresses rather than domain names. The IP addresses are managed by Microsoft Azure and may change over time. You can download them from Microsoft: https://www.microsoft.com/en-us/download/details.aspx?id=56519
+Alternatively, you can download the list of FQDNs and IP addresses from Resco in JSON format. This download also includes the IP addresses for outbound communication. It is cached and updated every 4 hours.
+* https://svc-dev.resco.net/network/allowlist (temporary list)
+* https://svc.resco.net/network/allowlist (future permanent list)
+== Notifications ==
+The licensing server sends notification mail to all Woodford administrators whenever a license is automatically assigned to a mobile user.
+* In the '''Account details''' section, find information about the organization where the license was assigned. The license is connected to the '''[[Organization ID|Organization Id]]''', other parameters are just informative.
+* In the '''Mobile User Licenses''' section, see the numbers of total, used, and available licenses.
+* In the '''User details''' section, find the user ID. The message does not include the username because the licensing server does not have access to CRM data, and also to protect privacy in accordance with GDPR.
+* If the mail is difficult to read in your email client, click the appropriate link at the bottom of the message to '''display''' the content '''in a web browser'''.
+* The link to '''unsubscribe''' is also available here. It takes you to the '''Manage your notification subscriptions''' page that lists all the organizations where you connected as a Woodford administrator OR where a different admin entered your email address. You can subscribe or unsubscribe on this screen.
+Alternatively, to subscribe to notification emails or manage addresses for a particular organization, log in to [[Woodford]], go to '''Administration > [[Settings]]''' and enable '''Send licenses assignment notifications'''. You can also edit the email address(es).
 [[Category:Security]]