Adobe SSO (Federated ID?) with Azure or ADFS

[AndrewC88]

We're considering purchasing enterprise subscriptions for Acrobat DC and I'm reviewing our options for single sign on.

We already federate our on-premises Active Directory identities with Azure AD and Office 365 and use Microsoft ADFS for authentication and SSO. We want our users to be able to use that same identity to log in to their Adobe subscriptions. (i.e., no separate Adobe password)

My question is: Can we configure Adobe SSO to authenticate to Azure or will we need to configure Adobe SSO to work with ADFS?

What's the best practice in this case? The Azure setup is slightly easier, but we can do either.

Also, when it comes time to deploy, is there a way to configure the applications so they'll automatically attempt to log on with the user's credentials? We want deployment to be as seamless as possible for users.

Thanks

[Damien Berest]

Hello

You can get Adobe SSO to work with Azure:

       Configure Microsoft Azure for use with Adobe SSO

You can also get Adobe SSO to interface with your ADFS:

        Enterprise Help | Configure Microsoft AD FS for use with Adobe SSO

As far as automatic login, you may be able to implement some form of automated Windows authentication, but that is something that is outwith the Adobe system

Regards

Damien

[AndrewC88]

https://forums.adobe.com/people/Damien+Berest  wrote

As far as automatic login, you may be able to implement some form of automated Windows authentication, but that is something that is outwith the Adobe system

Damien,

I'm not sure what you mean by this. We have Azure and ADFS configured with Windows Authentication, and we like how that works.

I am currently using Creative Cloud with an Adobe ID and I have to log in to the Creative Cloud application to install software.  I'm wondering if we will be able to skip the login part if we switch to using a Federated ID with SSO.

Thanks,

Andrew

[Damien Berest · Accepted solution]

Hello

It is possible to configure the login process, so that the users initiates that process, and the SSO system fills in the password for them. This is something that would be configured within your own implementation of SSO.

However, if I understand your query properly, you are describing having the user logged into the CC apps, automatically, without any interaction. This is a feature of IDP-Initiated SSO, which we do not supported at this time.

Regards

Damien

[AndrewC88]

Thank you, Damien. That is helpful.

Do you know if there are any plans to add this anytime soon?

Andrew

[Damien Berest]

Hello Andrew

Unfortunately, that is not something on which I can comment.

Regards

Damien