SSO question

[shahin0D4D]

Hi guys,

We are going to setup SSO with Azure AD. Our users are synced to the Azure AD as part of office 365.

Currently we have a sinlge adobe account and we use this on the users's devices that need Adobe products.

We know how to setup the SSO and Sync the Azure security groups  that we have been created for Adobe products,also we add 2 test users to the Azure Adobe groups.

My question is, does our users can keep on using the adobe products untill we run some tests with the the test users that are synced with Admin console? or when we sync the Azure adobe groups to the Adobe admin console only the test users that re synced to Admin console can use the adobe products?

Thanks.

[SuJoshi]

Hello Shahin,

Once you setup Azure connector, the existing users who are added in the admin console as Adobe ID would still be able to use the creative cloud apps if the license is intact. You can test SSO with the synced account and once it is successful then you can sync all the users and use "edit identity type by CSV" option which will migrate the license from Adobe ID to the synced Federated ID and also trigger the automated asset migration process using which the users can migrate the cloud files from Adobe to Federated ID.

This help article has all the details: https://helpx.adobe.com/in/enterprise/using/sso-setup-azure.html

[shahin0D4D]

Thanks for your reply,

Currently we dont have any users in the Admin console. there is only one account that the is the console's Admin account.

untill now we did installed the adobe products from the pakages that we have created for each adobe apps and when open the installed apps we use a single email address to activate each the app on different PC.

My understanding is that from november of this year this going to changed and each user must login with its own email address.

We want to setup a test with only 2 users before doing this for all 500 users, so we would like to know, can we sync only this 2 users from Azure groups to Admin console without effecting other 498 users 🙂

Thanks

[SuJoshi]

You can sync 1 or 2 users for the testing purpose and once you are able to test it successfully then you can sync all other users.

[shahin0D4D]

Thank you  for your reply,

Can you point me to a document on how to link our Creative Cloud licenses to the Azure as well?

[SuJoshi]

Once you sync the user group, then you can assign the product profile to that user group and the licenses will be assigned to the users who are added under that user group. You can also assign the license manually by going to the user's account. 

Kindly check our help article on Azure connector which has all the information: https://helpx.adobe.com/in/enterprise/using/sso-setup-azure.html

[shahin0D4D]

Thanks for your reply,

We did synced our Azure AD groups with Admin console.

Now in the Admin console under the products see this:

Default All Apps - 100 GB configuration 

License quota 201, 0 users and 0 Administrators.

Should we in the same page go to the table users and add one of the synced users here? This user has already some of adobe products on his PC that we installed and activated it before the sync, How can we run a test with this test user?

Thanks in advance for your help.

[SuJoshi · Accepted solution]

First, check if the user is synced to the Adobe admin console under the "Users" tab. If yes, then go to the "User Group" and select the group which is synced. Select the "assigned product" tab and add/assign Default All Apps - 100 GB configuration product profile. That license will be assigned to those users who are added to that user group. 

Once the user receives the email notification, you can sign out from the installed creative cloud app, log in again selecting the "company or school account" option which will activate the subscription. 

If you just want to test SSO then, you can visit "adobe.com", select the "Sign in" option and use the federated ID which is synced to the Adobe admin console.

I would recommend checking the help document which I shared with your earlier has all the information and details.