Identity server license is expired

Description

This alert is triggered when the Identity Server license check reports that the Duende IdentityServer license used by the Relativity Identity Service has expired.

Resolution Guidance

Impact When Active

The Identity Service is running with an expired Duende IdentityServer license. The Identity Service logs an error about the expired license each time the license is checked, and running IdentityServer without a valid license is out of compliance with the Duende licensing terms. Left unresolved, the license problem persists for every Relativity application that depends on the Identity Service for authentication.

How To Resolve

  • Confirm the expiration by calling the Identity Service license endpoint (Duende/GetLicenseInfo, for example https://<host>/RIS/Identity/Duende/GetLicenseInfo) from the host reporting the alert. The response shows status, isValid, expirationDate, and daysUntilExpiration.
  • The Duende IdentityServer license key is built into the Relativity Identity Service. It is not a setting that can be edited in Relativity, an instance setting, or a configuration file.
  • Contact Relativity Support to obtain a Relativity Server version or patch that includes a renewed Duende IdentityServer license key.
  • Upgrade the Identity Service to that version or patch.
    • Schedule the upgrade in a maintenance window and warn users of a possible brief authentication disruption while the Identity Service restarts.
  • After the upgrade, call the license endpoint again and confirm isValid is true. The alert clears within about 30 minutes, once a license check reports a valid license (the license check and the alert each run every 15 minutes).

Alert Details

The alert is active for the following conditions in Relativity:

  • When the Identity Server license check reports relsvr_idsvr_license_valid as false and includes a license expiration date.

The Environment Watch OTEL collector on the SQL Primary server calls the Identity Service license endpoint every 15 minutes, only when the Next-Gen Identity Service is installed. Each call makes the Identity Service emit the license telemetry that this alert evaluates.

Alert Condition Details

Name Value
Rule Type Elastic Query
Data View logs-*
Filter Query service.name : "Relativity_Server_IdentityService" AND labels.relsvr_idsvr_license_valid : false AND labels.relsvr_idsvr_license_expiration : * AND NOT labels.relsvr_idsvr_license_expiration : ""
Threshold > 0
Time Window 30 minutes
Frequency 15 minutes

Alert Metric Details

Metric Name:

  • labels.relsvr_idsvr_license_valid

Metric Description:

  • This metric reports whether the Duende IdentityServer license used by the Identity Service is currently valid. The alert triggers when the license is reported as not valid (false) and an expiration date is present.

Metric Attributes:

Attribute Name Description
service.name Emitting service (Relativity_Server_IdentityService)
host.name Host that emitted the license check
labels.relsvr_idsvr_license_valid Whether the Duende IdentityServer license is valid
labels.relsvr_idsvr_license_expiration License expiration date and time (UTC)
Feedback