SAML app and Google waffle

Forum|Forum|5 years ago
April 3, 2020
2 replies
8676 views

We're a school district setting up Federated IDs using Google as the source for accounts so we can set up the free student access to Adobe products during the Covid-19 closure. When the SAML app that provisions user accounts to Adobe is turned On for a Google OU, and Adobe app shows up in the Google waffle for any user in that OU. The app doesn't appear to do anything, when clicked on it goes to an Adobe ID error page that says "An error occurred. This might be a sign of an IDP initiated login, which we don't support." Is it possible to use the SAML app to provision accounts from Google to Adobe admin console without having that app show up in the Google waffle? It may be a source of confusion for our users.

COVID EDU Access

Correct answer SuJoshi

So was there a resolution to this? We've just set up SSO with Google Workspace for our K12 Adobe Express and after setting things up we are seeing the same behaviour as adamm75998392.

@Stuart2831529493ll My apologies, but, Adobe still does not support IDP-initiated workflow. You might want to check this article that could resolve your issue: https://helpx.adobe.com/in/enterprise/kb/education-sso.html

G

Generous_magnificence8780

Participant

What

A

Anshul_Nautiyal

Community Manager

Hi @Generous_magnificence8780,

Thank you for reaching out. Could you please provide more details about the issue you are experiencing? This will help us assist you more effectively.

Regards,
^AN

Bani Verma

Community Manager

Hello,

Kindly check the steps below on how to use and access SSO:

As you have setup Google connector, kindly start syncing the users with the Adobe admin console. You can check this help document on how to setup and sync users: https://helpx.adobe.com/in/enterprise/using/setup-sso-google.html.
Once the users are synced, the users can visit creativecloud.adobe.com or adobe.com to download the app.
They have to enter the complete email ID on the login page which will redirect them to SSO where they can authenticate the account.

The users will get an error if they are using any SAML app as we do no support IDP initiated workflow. The user can either visit our website or open the creative cloud app to access the applications. You can check this help document on how to get temporary access to the CC apps: https://helpx.adobe.com/enterprise/kb/covid-19-education-labs.html.

Let us know if this helps or if you have any more queries.

A

Anonymous

Thanks @Bani Verma ! I've been racking my brain over this issue as well because the only documentation that talks about this at all is in Google Workspace Admin Help which states:

Adobe supports both Identity Provider (IdP) initiated and Service Provider (SP) initiated SSO.

S

Stuart2831529493ll

Participant

So was there a resolution to this? We've just set up SSO with Google Workspace for our K12 Adobe Express and after setting things up we are seeing the same behaviour as adamm75998392.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded