Support Conditional Access for SSO authentication from the default login

Report · Dec 10, 2024

Our company is implementing Conditional Access with our rollout of Windows 11. We have found that the Creative Cloud Desktop application does not support logging in to the user's Adobe ID with Single Sign On when Conditional Access is enabled. The issue seems to be that the Device ID is not passed during the authenticaiton attempt, so Conditional Access does not trust the device, even though the device the user is attempting to login from is a trusted device.

Adobe's workaround is to use Sign In using your browser. This method works, because the browser login does pass the Device ID correctly. But the issue with this workaround is that SIgn In using your browser is hidden in the Help menu, not in a place where it is visible to the user.

We ask that Adobe improve the login experience so that the default login form passes the Device ID correctly and otherwise conforms with Micorosoft Kerberos to support logging in via SSO.

Failing that, can you at least make the Sign in using your browser option available on the welcome form, rather than hiding it in the Help menu?

Lastly, please make the Sign in using browser method available through Adobe Captivate. Our Captivate users will need to have Creative Cloud Desktop installed alongside Captivate, and use it to authenticate their Adobe ID, which previously they were able to log in through Captivate without using Creative Cloud Desktop.

Report · Feb 14, 2025

@christopher5E41

I've moved your post from Creative Cloud Desktop to the Enterprise and Teams forum.

I'm not sure, but you may need to ask the Captivate part in the Captivate forum:

https://community.adobe.com/t5/captivate/ct-p/ct-captivate

Jane

Report · Feb 14, 2025

Hi @christopher5E41 ,

Thank you for reaching out, and I appreciate your patience in awaiting a response. Upon review, I see that your Adobe ID is associated with an active enterprise plan.

It sounds like you are encountering an issue where the default login method in Creative Cloud Desktop does not pass the Device ID during authentication. As a result, Conditional Access policies on Windows 11 do not recognize the device as trusted, leading to authentication failures. While the “Sign in using your browser” option serves as a workaround, we understand that its current placement in the Help menu may not be ideal.

To formally submit this feedback for consideration, I recommend using the Wishform: https://adobe.ly/3EATFrH

For further assistance, you can also contact Adobe Enterprise Support here: https://adobe.ly/40RbEBC

Please let me know if you need any additional guidance.

Regards,
^AN