Allow Enterprise Administrators to Exclude Shared Accounts from Automatic Sign-Out Policies

Our organization manages Adobe Creative Cloud through Adobe Enterprise licensing and supports a variety of shared computing environments, including instructional labs, classroom workstations, multimedia studios, kiosks, and shared production devices.

The recent request to implement automatic sign-out policies has created operational challenges for these shared devices. While automatic sign-out is an important security feature for individually assigned user accounts, it negatively impacts legitimate shared-use scenarios.

We request the ability for Enterprise administrators to designate specific accounts or devices that are exempt from automatic sign-out policies.

Proposed Solution

Provide one or more of the following administrative options:

• Allow designated Enterprise accounts to be excluded from automatic sign-out.
• Allow exclusions based on user groups within the Adobe Admin Console.
• Allow exclusions based on Shared Device Licensing or other shared account classifications.
• Allow exclusions for trusted devices managed through Enterprise Mobility Management (such as Jamf Pro or Microsoft Intune).
• Provide an administrator-controlled timeout value that can be configured separately for exempted accounts.

Business Justification

Many higher education institutions, libraries, research facilities, and creative organizations maintain shared workstations where users rely on persistent Adobe authentication to support scheduled classes, production environments, and public access labs.

Automatic sign-out can result in:

• Interrupted classroom instruction.
• Increased support requests.
• Confusion for students and faculty.
• Additional technician workload.
• Delays in scheduled lab activities.
• Reduced reliability of shared creative workstations.

In managed enterprise environments, these devices are already protected through:

• Managed device enrollment.
• Enterprise authentication.
• Physical security controls.
• Endpoint management (Jamf Pro, Intune, etc.).
• Institutional access policies.

Because these devices are centrally managed, organizations should have the flexibility to determine when automatic sign-out is appropriate.

Expected Benefit

Adding administrator-controlled exclusions would:

• Reduce unnecessary support incidents.
• Improve the classroom and lab experience.
• Better support higher education and enterprise shared-device deployments.
• Preserve security while allowing organizations to make risk-based decisions for managed shared environments.
• Improve the overall enterprise management experience within Adobe Creative Cloud.

Thank you.