One of the best parts of having a Monotype Fonts subscription is having complete control over font permissions. Here’s how you can see who has access to Monotype Fonts, set up roles and permissions, and assign permissions to users.
How do I set up permissions?
The Roles tab (found under the Manage section) allows your administrators to create customized permission sets for your company's users and teams. Your Monotype Fonts account comes with two non-editable roles built in: Admin and Full Access. You can create up to five additional custom roles according to your teams’ needs.
To create custom roles, click on the + button next to the Roles title:
You can configure the following capabilities for your custom roles:
Font syncing
Install any font or family: Allows users to sync any font or family from the inventory using the Monotype App
Install any font or family from a shared font list only: Allows users to sync only the fonts and families included on font lists that have been shared with them using the Monotype App
Font downloads
Note: Only select enterprise users can download font files.
No download is available on 30 days trial, for creative agencies, and for individuals or small team subscription. Contact [email protected] for any queries.
Download font files: Allows select users to download the fonts or families from the inventory.
Download font files from shared font list only: Allows users to download only the fonts and families included on font lists that have been shared with them.
Web fonts
Download web font projects SHKs: Allows users to download SHKs (self-hosting kits) for web fonts
Access to web project embed code: Allows users to generate Javascript and CSS embed codes for web fonts
Organize & share
Create font lists: Allows users to create font lists
How do I set up teams?
1. Click on the + button next to the Teams title.
2. In the New Team dialog, enter a Name for your team. You can also add a description if needed.
3. Click Done to finish creating your team.
Adding users to a team
1. To add users to a team, click on the team to which you wish to add users.
2. In the team dialog, type the users’ email addresses, and click the Add button.
3. Click Done to finish adding users to your team.
Removing users from and deleting a team
1. To remove users from a team, click the bin icon in the team dialog.
2. To delete the team, click on the Delete team button in the top-right corner.
Where can I find an overview of users’ roles?
For a detailed overview of users’ roles, click on the Users tab under the Manage section. You will see a tabular view of all Monotype Fonts users in your company, their roles, and their team assignments, along with information like the number of active and inactive users. You’ll also have access to several configuration options.
The search bar at the top of the Users list allows you to run a quick search for a particular user or users in your organization.
The + Add filters button next to the user search bar allows you to filter the user list based on their roles and teams.
Can I map roles to an existing active directory?
Yes. Monotype Fonts’ SSO mapping feature allows you to map Monotype Fonts teams onto your company’s existing active directory (AD) groups.
This ensures that when they log into Monotype Fonts via SSO, users in your AD groups are provisioned into the right teams with their respective user roles. It also gives them immediate access to the font assets (folders, font lists, web projects and more) associated with their creative projects.
To implement this feature, ensure that your SSO setup is configured to pass group information in its SAML assertion. Please get in touch with our Customer Support team to ensure proper setup.
How do I create a new mapping?
1. Click the Create new button in the SSO tab under the Manage section.
2. In the Create SSO Mapping dialog, enter your SSO group name in the Tell us your SSO group field. (Make sure to confirm the spelling, as this is the name Monotype Fonts will match against the group name received from your active directory system.)
3. Then, select the User Role and Teams for users in this group from the drop-down menus.
You can add users within a group to multiple Teams by clicking on the + icon next to the drop-down menu(s).
5. Once set up, click the Create SSO Mapping button to finish.
Your new SSO mapping should now appear in the SSO mapping table.
How do I modify existing mappings?
1. To modify existing mappings, click on the group name to open the Edit SSO Mapping dialog.
2. In the Edit SSO Mapping dialog, use the User Role and/or Teams drop-down menus to update the existing mapping.
You can add users in a group to multiple Teams by clicking on the + icon beside the drop-down menu(s).
How do I create mappings for unmapped groups?
1. Click on an unmapped group’s name. This will open the Create SSO Mapping dialog.
2. In the Create SSO Mapping dialog, use the User Role and/or Teams drop-down menus to create the new mapping.
You can add users within a group to multiple teams by clicking on the + icon beside the drop-down menu(s).
What happens if a match is not found between the AD and the SSO mapping?
In case a match is not found:
For new users, user configuration is mapped to a pre-existing mapping named “default.” You may also choose to set one of your existing mappings as a default.
For existing users, no configuration changes are made.
In both cases, unrecognized groups are listed under "Unmapped Groups" and mappings can be modified using the steps outlined in the sections above.
What if there are multiple matches?
In the case of multiple matches, the first match takes effect.
Changes in the directory group are not reflected—what’s happening?
When a particular group’s mapping or a user’s active directory group in Monotype Fonts is modified, their user configuration is updated accordingly at the next login. Sessions time out after eight hours, checking and (if needed) updating user configuration upon each successive login.
Can I modify the roles and teams assigned to SSO users?
Company Admins cannot modify roles or teams for users logging in via SSO and mapped to existing active directory groups. To remove users from a group, please contact your IT/System Administrator.