Skip to main content
Participating Frequently
January 29, 2019
Answered

Students can't login to Adobe Spark

  • January 29, 2019
  • 2 replies
  • 9283 views

Hi:

I desperately need help. Suddenly, none of my students are able to log into Adobe Spark with their school email accounts. I still have access because I'm the administrator. I'm having a hard time understanding how my students no longer can access Spark. The error message they get is "Access Denied". They were able to log in previously.

Any ideas on how to fix this issue?

Thanks

Ben

This topic has been closed for replies.
Correct answer alisterblack

Hi Alister:

No worries. If the setup is correct, then why do I get the "Okta" page after clicking on the spark icon in G-Suite? Shouldn't I be taken straight to Spark instead?

Thanks


Hi Ben,

Once you have set up SSO for your Adobe admin console, you don't need to add individual applications also. From a technical perspective this is because Adobe supports service-provider (SP) initiated login and not Identity Provider (IDP) initiated login.

As our document states "To sign in to Adobe Spark, open the website for Adobe Spark, click Log In > Log In With School Account. Then, sign in using your email address and password."

This user video also gives a good overview - https://youtu.be/tUoaCjkvFgA

2 replies

Participant
November 8, 2019

i got u

alisterblack
Inspiring
January 29, 2019

Hi Ben,

Were the students able to sign in previously, has anything changed? Can none of them sign in?

I can see that you are using Federated ID with Google as your Identity Provider.

Make sure that you are signing in with the Federated ID password and not the students own Google ID as this is a different account.

You as the admin are using Adobe ID which is why you can sign in.

If you need to dig deeper into this I advise contacting our support teams. You can do this via the Support tab in your Admin Console.

Our documentation covering Google IDP setup is here - Configure Google IdP for use with Adobe SSO

Participating Frequently
January 29, 2019

Hi Alisterblack:

They previously signed in. I set up SSO with G suite for education so my students log in with the same school credentials. It worked before and I haven't done anything different. Should I delete their accounts in the adobe admin console and start over?

Thanks

alisterblack
Inspiring
January 31, 2019

I followed the instructions on the Adobe SSO setup page word for word and didn't have issues until a couple of days ago. Is there a way you or I could check if the ACS settings are ok?


Hi Ben,

To clarify - you were able to log in via SSO from outside your network until a couple of days ago?

Can you log into services other than Spark with your Federated ID? For example, adobe.com or the Creative Cloud Desktop App? Could this have been blocked at the firewall level or by proxy, VPN or antivirus tools at the external location? Can you try with another browser, or by using an incognito browsing session? Sometimes an ISP will even block certain services or endpoints.

From the Admin Console everything seems correct and your logs show no sign-in errors.

Your ACS is set to use https - this is the setting in the Adobe Admin Console called IdP issuer.

That information comes from the Entity ID in the Google IdP Information screen.

This seems to auto-populate and I am not sure if this is something you can edit.