SAML app and Google waffle

[adamm75998392]

We're a school district setting up Federated IDs using Google as the source for accounts so we can set up the free student access to Adobe products during the Covid-19 closure.  When the SAML app that provisions user accounts to Adobe is turned On for a Google OU, and Adobe app shows up in the Google waffle for any user in that OU.  The app doesn't appear to do anything, when clicked on it goes to an Adobe ID error page that says "An error occurred.  This might be a sign of an IDP initiated login, which we don't support."  Is it possible to use the SAML app to provision accounts from Google to Adobe admin console without having that app show up in the Google waffle?  It may be a source of confusion for our users.

[Bani Verma · Accepted solution]

Hello, 

Kindly check the steps below on how to use and access SSO:

• As you have setup Google connector, kindly start syncing the users with the Adobe admin console. You can check this help document on how to setup and sync users: https://helpx.adobe.com/in/enterprise/using/setup-sso-google.html.
• Once the users are synced, the users can visit creativecloud.adobe.com or adobe.com to download the app. 
• They have to enter the complete email ID on the login page which will redirect them to SSO where they can authenticate the account. 

The users will get an error if they are using any SAML app as we do no support IDP initiated workflow. The user can either visit our website or open the creative cloud app to access the applications. You can check this help document on how to get temporary access to the CC apps: https://helpx.adobe.com/enterprise/kb/covid-19-education-labs.html.

Let us know if this helps or if you have any more queries.

[Guest]

Thanks @Bani Verma ! I've been racking my brain over this issue as well because the only documentation that talks about this at all is in Google Workspace Admin Help which states:

Adobe supports both Identity Provider (IdP) initiated and Service Provider (SP) initiated SSO.

[Stuart2831529493ll]

So was there a resolution to this? We've just set up SSO with Google Workspace for our K12 Adobe Express and after setting things up we are seeing the same behaviour as adamm75998392. 

[SuJoshi · Accepted solution]

@Stuart2831529493ll My apologies, but, Adobe still does not support IDP-initiated workflow. You might want to check this article that could resolve your issue: https://helpx.adobe.com/in/enterprise/kb/education-sso.html