Sounds to me a one time lump sum and going forward no license with SFOR as they have joined forces with Ping Identity to authenticate through Azure AD. Ping Identity and Microsoft AD became commercially available June 15, 2017. I cannot paste with IPad, but Secureauth website show alliance with Ping and Ping Identity website has a video about how Ping and Azure pull it together. IMHO, forward license fees will come from MS....