Enable SSO in Creative Cloud for Teams

[sreichling]

Back in 2015 when SSO was enabled in Creative Cloud for Enterprise, SSO via SAML was an enterprise feature. We are a small business with less than 100 employees and SSO/SAML support is one of the first questions we ask a vendor when evaluating a product. This feature has really moved down market and Adobe should enable SSO/SAML ID Federation in Creative Cloud for Teams.

[Vikrant Rai · Accepted solution]

For organizations such as yours, Creative Cloud for enterprise is also offered via the Value Incentive Program (VIP). In addition to SSO there are more features geared towards medium to large enterprises. Talk to your Adobe sales rep and see if it's worthwhile for you to upgrade from a Teams plan to Enterprise plan.

https://www.adobe.com/howtobuy/buying-programs/enterprise.html

If required, we can ask someone from the sales team to reach out and explain the advantages for an enterprise plan, so that you can make an informed decision. Let us know.

I'll also pass your request on to the product team. 

[sreichling · Accepted solution]

We have talked with our reseller about moving to Enterprise but it is cost-prohibitive to gain the one feature we want.

Thank you for the reply and for passing the suggestion to the product team.

[Brewsters]

+1 on SSO for Teams.  This is a necessary feature - even for small businesses that need to enforce policy across multiple vendors.  This adds another item to be completed on all our checklists and procedures regarding user authentication.

[itsmejacobw-mm]

I agree. Adobe should inherit SSO for its SMB customers. We use SSO for everything throughout our org (even websites that we're actively working on) as an easy and secure way of accessing tools, information, branding, et cetera.

[juggler314]

+1 here as well, this is ridiculous. With security being so much in the forefront it makes no sense to force SMB's to pay way more to license enterprise just to get at a federated identity.

On the back end the whole this is automated - you upload a certificate, you enable it, done - it's a few clicks. This is essentially a paywall.

Slack at least gives you the option in the plus tier rather than going full on enterprise...as do many other apps...

[Guest]

I also agree as a SME we enable SSO on every application we can to streamline efficences and security but then you hit issues like this where you need the Enterprise Tier to enable SSO.  It is always cost prohibative and incredibly frustrating especially now most SME's use the likes of GSuite or Azure AD and therefore SSO is available for them to configure.

[defaultaqvvln9jhqel]

So I just went through my sales rep to see what it would cost to move to Creative Cloud for Enterprise simply for SSO. 

It gets us deployment assistance, which we will use what once ever few years when we need to reconfigure how we deploy. 

It gets us advanced technical support, which might be useful, but at this point we know not to go immediately install new releases. 

It gets our creative staff "expert service calls" to overcome design roadblocks. We should have enough internal staff to handle this internally. If this were advanced product training it might actually justify some of the cost. 

My biggest take away was this page: https://www.adobe.com/creativecloud/business/enterprise-plan.html

Where the top two points are security driven (data protection and SSO).

I came away with the realization that Creative Cloud for Enterprise is a paywall for encryption at rest & SSO that happens to come with additional support. Now if Adobe truly wanted to provide a secure product they would support encryption at rest in the "for Teams" plans, but with an Adobe managed key only and make SSO a flat-rate paid add-on. 

[dtlsarc]

Just running into the same issue here as everyone else.  It's simply ridiculous in today's online world not to offer SSO for small business (teams, as Adobe referse to us) customers.  We have less than 10 employees, and we already pay a premium for "central user management" in Creative Cloud for teams vs individual licenses.  We already pay that premium, and along with it should come SSO.

We enable SSO for anything we can.  It is a necessary security implementation, not a feature that should be paid.  Even Microsoft sees this -- any and ALL Office 365 / Microsoft 365 customers get Azure AD and SSO for free.  $4/month/user for Exchang Online P1 -- SSO included at no additional cost.  No other vendor we've worked with pushes this so far out of reach for a small business like ours (and the others on this thread).

Adobe -- get your act together.  Understand the security need here.  You should be encouraging every one of your users, small and large, to implement SSO.  Having additional user accounts is only on more vector for attack and one more thing to worry about when a user leaves the company.  Knowing that I can disable their account at our IdP and they lose access to everything makes us inherently safer.  And we have MFA enabled with our IdP, so it's another layer of safety.  Adobe is not great at user management, so let the IdP handle that; it's what they are built to do.

[andyg488952]

Couldn't agree more with everything you've said. Even a basic plan with ZenDesk allowed me to easily integrate SSO w/SAML. This is nothing more than a paywall, shamefully at the expense of security. An absolute disgrace in today's environment.

[Micro Internal]

So, I moved my company over to teams with 2 expectations.

1. Centralised licenses management and
2. SAML integration.

You know basic requirements for most software applications!
OK so Shame on me for not doing my research thoroughly. but out of the numerous pages of documentation I only found a signle "note" that specified you had to have Enterprise licenses for SAML, and even that was not clear!

the portal also does not inform you as the requirements.. the option is just... missing.
I think the replies below pretty much sums up the SME experience with Adobe..
we have numerous SAML integrations and are a company of only 100+ individuals. so to say SAML is enterprise only is plain wrong and makes you completely out of touch with your clients.
We even offer SAML in our own offering! So, to say it requires a "premium" payment for such a security feature is unjustified. the dev cost for implementing SAML is not only low, but you have also already done it! the rest is automated.
The way you handle user management is awful also! you should just leave it to IdP to do!
Not only is it less secure. it also increases your services CO2e footprint for the provision of the service as more effort is required to create and decommission users.

1. You don’t care about your environmental impact
2. You don’t care about your customers security needs.
3. Your out of touch with your clients
4. You dont seem to care about guiding your clients to the solution or why something is missing.

All round you don’t seem to care about supporting or fostering smaller business (which might be bigger buisness in the future able to pay the premium)

[Todd26024895npii]

Adobe - It is literally a disservice to your customers to exclude SAML/SSO as a basic feature.  I don't want to pay a bunch of bs charges just to get a feature that should be part of any business software in today's threat landscape.  I mean I don't expect much different from adobe because they have always been like this. n Hopefully this doesn't fall on deaf ears but judging from the age of this forum and the responses, it will take a ChristmaHanuKwaanzakah miracle for us to see SSO in the basic plan.