Configure Microsoft AD FS for use with Adobe SSO

helpx.adobe.com/ua/enterprise/kb/configure-microsoft-ad-fs-with-sso.html

Page Value

$ 0.1

Moz Rank 7 BackLinks -1
Alexa Rank -1 Internal URL 214
Page Authority 70 External URL 2
Title Configure Microsoft AD FS for use with Adobe SSO
Description This document describes the process to configure the Adobe Admin Console and a Microsoft AD FS server to be able to log in to Adobe Creative Cloud applications and associated websites for Single Sign-On.
Keywords Reference-support-how-to DocumentCloudforenterprise CreativeCloudforenterprise SingleSignOn ExperienceCloud
Domain helpx.adobe.com
IP 104.123.154.168 104.123.154.139 2600:1406:6c00::17cc:911b 2600:1406:6c00::17cc:913b
Path /ua/enterprise/kb/configure-microsoft-ad-fs-with-sso.html
Location United States California San Jose Akamai International B.V. (AS20940 Akamai International B.V.)
Page Link Analyse
Internal URL
(214)
External URL
(2)
JavaScript File
  • /etc.dexter.dexterlibs/dexter/clientlibs/base/headIE.fp-8bbe9a4eee8062afe68ae276ac39e4ed.js
  • /etc.dexter.dexterlibs/dexter/clientlibs/base/head.fp-708e64f3024b3872af42b32eadb26e05.js
StyleSheet File
  • https://use.typekit.net/glm4yoq.css
  • /etc.dexter.dexterlibs/helpx/clientBundles/main/clientlibs.fp-51619fc8402e1710f3092a8f3420db4f.css
  • /etc.dexter.dexterlibs/helpx/clientBundles/article3Components/clientlibs.fp-a4034ed8ee001f6a038f663f1db33dbc.css
Page Text
Enterprise&TeamsLearn&SupportGetStartedUserGuideConfigureMicrosoftADFSforusewithAdobeSSOПошукОстаннєоновлення:2021-08-09|ТакожстосуєтьсяCreativeCloudforenterprise,DocumentCloudforenterprise,ExperienceCloudAdobeEnterprise&Teams:AdministrationguidePlanyourdeploymentBasicconceptsLicensingIdentityUsermanagementAppdeploymentAdminrolesDeploymentGuidesNamedUserdeploymentguideSDLdeploymentguideDeployCreativeCloudforeducationDeploymentguideIntegrationwithCanvasLMSIntegrationwithBlackboardLearnConfiguringSSOforDistrictPortalsandLMSsKivutoFAQPrimaryandSecondaryinstitutioneligibilityguidelinesSetupyourorganizationSetupidentityIdentitytypes|overviewSetuporganizationwith EnterpriseIDSetuporganizationwith FederatedIDSSOoverviewSetupAzureConnectorandsyncSetup SSOwithMicrosoftviaAzureOIDCAddAzureSynctoyourdirectoryAzureConnectorFAQSetupGoogleFederationandsyncSetup SSOwithGoogleFederationAddGoogleSynctoyourdirectoryGooglefederationFAQGenericSAMLSetupSSOwithotherSAMLprovidersSetupSSOwithMicrosoftAzureADFSSSOCommonquestionsSSOTroubleshootingEducationSSOConfigureSSOforDistrictPortalsandLMSCommonquestionsDovetailVerifyownershipofadomainAddandmanagedomainsLinkdomainstodirectoriesUsedirectorytrusttoaddpre-claimeddomainsMigratetonewauthenticationproviderAssetsettingsAuthenticationsettingsPrivacyandsecuritycontactsConsolesettingsManageencryptionManageproductsandentitlementsManageusersOverviewAdministrativerolesUsermanagementtechniquesManageusersindividually  Managemultipleusers(BulkCSV)UserSynctool(UST)UsermanagementAPI(UMAPI)MicrosoftAzureSyncGoogleFederationSyncChangeuser'sidentitytypeManageusergroupsManagedirectoryusersManagedevelopersMigrateexistinguserstotheAdobeAdminConsoleMigrateusermanagementtotheAdobeAdminConsoleManageproductsandproductprofilesManageproductsManageproductprofilesforenterpriseusersManageself-servicepoliciesManageappintegrationsManageproductpermissionsintheAdminConsole  Enable/disableservicesforaproductprofileSingleApp|CreativeCloudforenterpriseOptionalservicesManageSharedDevicelicensesWhat'snewDeploymentguideCreatepackagesRecoverlicensesMigratefromDeviceLicensingManageprofilesLicensingtoolkitSharedDeviceLicensingFAQManagestorageandassetsStorageManageenterprisestorageAdobeCreativeCloud:UpdatetostorageManageAdobestorageAssetmigrationAutomatedAssetMigrationAutomatedAssetMigrationFAQ  ManagetransferredassetsReclaimassetsfromauserStudentassetmigration|EDUonlyAutomaticstudentassetmigrationMigrateyourassetsManageservicesAdobeStockAdobeStockcreditpacksforteamsAdobeStockforenterpriseUseAdobeStockforenterpriseAdobeStockLicenseApprovalCustomfontsAdobeAssetLinkOverviewCreateusergroupConfigureAdobeExperienceManager6.xAssetsConfigureandinstallAdobeAssetLinkManageassetsAdobeAssetLinkforXDAdobeSignSetupAdobeSignforenterpriseorTeamsAdobeSign-TeamfeatureAdministratorManageAdobeSignontheAdminConsoleCreativeCloudforenterprise-freemembershipOverviewGettingstartedDeployappsandupdatesOverviewDeployanddeliverappsandupdatesPlantodeployPreparetodeployCreatepackagesPackageappsviatheAdminConsoleCreateNamedUserLicensingPackagesAdobetemplatesforpackagesManagepackagesManagedevicelicensesSerialnumberlicensingCustomizepackagesCustomizetheCreativeClouddesktopappIncludeextensionsinyourpackageDeployPackages DeploypackagesDeployAdobepackageswithSCCMDeployAdobepackageswithARDInstallproductsintheExceptionsfolderUninstallCreativeCloudproductsUseAdobeprovisioningtoolkitenterpriseeditionAdobeCreativeCloudlicensingidentifiersManageupdatesChangemanagementforAdobeenterpriseandteamscustomersDeployupdatesAdobeUpdateServerSetupTool(AUSST)AUSSTOverviewSetuptheinternalupdateserverMaintaintheinternalupdateserverCommonusecasesofAUSST  TroubleshoottheinternalupdateserverAdobeRemoteUpdateManager(RUM)UseAdobeRemoteUpdateManagerChannelIDsforusewithAdobeRemoteUpdateManagerResolveRUMerrorsTroubleshootTroubleshootCreativeCloudappsinstallationanduninstallationerrorsQueryclientmachinestocheckifapackageisdeployedCreativeCloudpackage"InstallationFailed"errormessageCreatepackagesusingCreativeCloudPackager(CC2018orearlierapps)AboutCreativeCloudPackagerCreativeCloudPackagerreleasenotesApplicationpackagingCreatepackagesusingCreativeCloudPackagerCreatenamedlicensepackagesCreatepackageswithdevicelicensesCreatealicensepackageCreatepackageswithserialnumberlicensesPackagerautomationPackagenon-CreativeCloudproductsEditandsaveconfigurationsSetlocaleatsystemlevelManageyouraccountManageyourTeamsaccountOverviewUpdatepaymentdetailsManageinvoicesChangecontractownerAssignlicensestoaTeamsuserAddproductsandlicensesRenewalsTeamsmembership:RenewalsEnterpriseinVIP:RenewalsandcompliancePurchaseRequestcomplianceValueIncentivePlan(VIP)inChinaVIPSelecthelpReports&logsAuditLogAssignmentreportsContentLogsGethelpContactAdobeCustomerCareSupportoptionsforteamsaccountsSupportoptionsforenterpriseaccountsSupportoptionsforExperienceCloudOverviewThedocumenthighlightstheprocesstoconfiguretheAdobeAdminConsole withaMicrosoftADFSserver.TheIdentityProviderdoesnothavetobeaccessiblefromoutsidethecorporatenetwork,butifitisnot,onlyworkstationswithinthenetwork(orconnectedviaVPN)willbeabletoperformauthenticationtoactivatealicenseorsigninafterdeactivatingtheirsession.SetupSSOwithMicrosoftADFS(Watch:17min)Примітка.InstructionsandscreenshotsinthisdocumentareforADFSversion3.0,butthesamemenusarepresentinADFS2.0.PrerequisitesBeforecreatinga directoryforsinglesign-onusingMicrosoftADFS,thefollowingrequirementsmustbemet:AMicrosoftWindowsServerinstalledwithMicrosoftADFSandthelatestoperatingsystemupdates. IfyouwanttheuserstouseAdobeproductswithmacOS,ensurethatyourserversupportsTLSversion1.2andforwardsecrecy.TolearnmoreaboutADFS,seetheMicrosoftIdentityandaccessdocument.Theservermustbeaccessiblefromusers'workstations(forexample,viaHTTPS).SecuritycertificateobtainedfromtheADFSserver.AllActiveDirectoryaccounts,tobeassociatedwithaCreativeCloudforenterpriseaccount,musthaveanemailaddresslistedwithinActiveDirectory.CreateadirectoryintheAdobeAdminConsoleToconfiguresinglesign-onforyourdomain,youneedtodothefollowing: Sign intothe AdminConsole andstartwith creatingaFederatedIDdirectory,selecting OtherSAMLProviders astheidentityprovider.DownloadtheAdobemetadatafile fromthe AddSAMLProfile screen.ConfigureADFS specifyingthe ACSURL and EntityID,anddownloadthe IdPmetadatafile.ReturntotheAdobeAdminConsoleand uploadthe IdPmetadatafile inthe AddSAMLProfile screenandclick Done.Tolearnmoreaboutthedetailsofeachstep,followthehyperlinks.ConfiguretheADFSserverToconfigureSAMLintegrationwithADFS,performthebelowsteps:Увага!AllsubsequentstepsmustberepeatedafteranychangetothevaluesintheAdobeAdminConsole foragivendomain.NavigatewithintheADFSManagementapplicationtoADFS->TrustRelationships->RelyingPartyTrusts andclickAddRelyingPartyTrust tostartthewizard.ClickStart andselectImportdatafromarelyingpartyfromafile,thenbrowsetothelocationtowhichyoucopiedthemetadatafromyourAdobeAdminConsole.Nameyourrelyingpartytrustandenteranyadditionalnotesasrequired.ClickNext.Determineifmulti-factorauthentication isrequiredandselecttherelevantoption.Click Next.DetermineifalluserscanlogonviaADFS.Click Next.Reviewyoursettings.ClickNext.Yourrelyingpartytrusthasbeenadded.LeavetheoptiontickedtoopentheEditClaimRules dialogtoquicklyaccessthenextsteps.ClickClose.Ifthe EditClaimRules wizardhasnotopenedautomatically,youcanaccessitfromtheADFSManagementapplicationunder ADFS -> TrustRelationships -> RelyingPartyTrusts,byselectingyourAdobeSSOrelyingpartytrustandclicking EditClaimRules... ontheright-hand-side.ClickAddrule andconfigure aruleusingthetemplateSendLDAPattributesasClaimsforyourattributestore,mappingtheLDAPAttributeE-Mail-AddressestoOutgoingClaimTypeE-MailAddress.Примітка.Asshownintheabovescreenshot,wesuggestusingemailaddressastheprimaryidentifier.YoucanalsousetheUserPrincipalName(UPN)fieldastheLDAPattributesentinanassertionastheemailaddress.However,wedonotrecommendthistoconfigureClaimRule.OftentheUPNdoesnotmaptoanemailaddress,andwillinmanycasesbedifferent.ThiswillmostlikelycauseproblemsfornotificationsandsharingofassetswithinCreativeCloud.Click Finish tocompleteaddingthetransformclaimrule.Again,usingtheEditClaimRuleswizard,addaruleusingthetemplate. TransformanincomingclaimtoconvertIncomingclaimsoftypeE-MailAddresswithOutgoingClaimTypeNameIDandOutgoingNameIDFormatasEmail,passingthroughallclaimvalues.ClickFinish tocompleteaddingthetransformclaimrule.UsingtheEditClaimRuleswizard,addaruleusingthetemplateSendClaimsUsingaCustomRulecontainingthefollowingrule:c:[Type=="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname",Issuer=="ADAUTHORITY"]=>issue(store="ActiveDirectory",types=("Email","FirstName","LastName"),query=";mail,givenName,sn;{0}",param=c.Value);ClickFinishtocompletethecustomrulewizard.ClickOK ontheEditClaimRules dialogtocompleteaddingthesethreerulestoyourrelyingpartytrust.Примітка.Theorderoftheclaimrulesisimportant;theymustappearasshownhere.Toavoidconnectivityproblemsbetweensystemswheretheclockdiffersbyasmallamount,setthedefaulttimeskewto2minutes.Formoreinformationontime-skew,seethe troubleshootingerrors document.DownloadtheADFSmetadatafileOpentheADFSManagementapplicationonyourserver,andwithinthefolderADFS>Service>Endpoints,selectthe FederationMetadata.UseabrowsertonavigatetotheURLprovidedagainstFederationMetadataanddownloadthefile.Forexample, https://<yourADFShostname>/FederationMetadata/2007-06/FederationMetadata.xml.Примітка.Acceptanywarningsifprompted.ToknowyourMicrorsoftADFShostnameonaWindowsoperatingsystem:OpenWindowsPowerShell>RunasAdministrator>TypeGet-AdfsProperties >Press enter>LookforyourHostname inthedetailedlist.UploadIdPmetadatafiletoAdobeAdminConsoleToupdatethelatestcertificate,returntoAdobeAdminConsole window.UploadthemetadatafiledownloadedfromADFStothe AddSAMLprofile screenandclick Done.Nextsteps:CompletesetuptoassignappstousersOnceyou'vesetupyourdirectory,dothefollowingtoenableyourorganization'suserstouseAdobeappsandservices:AddandsetupdomainswithintheAdminConsole.Associatethedomains withtheADFSdirectory.(Optional)IfyourdomainsarealreadyestablishedwithintheAdminConsoleinanotherdirectory,transferthemdirectlytothe newlycreatedADFSdirectory.Addproductprofilestofine-tunetheusageofyourpurchasedplans.TestyourSSOsetupbyaddingatestuser.Chooseyou user-managementstrategyandtools basedonyourrequirements.Then,adduserstotheAdminConsoleandassignthemtoproductprofilestogetusersstartedwiththeirAdobeapps.Tolearnmoreaboutotheridentity-relatedtoolsandtechniques,see Setupidentity.TestSingleSign-onCreateatestuserwithactivedirectory.CreateanentryontheAdminConsole forthisuserandassignitalicense.Then,testlogginginto Adobe.com toconfirmthattherelevantsoftwareislistedfordownload.Youcanalsotestbyloggingin toCreativeCloudDesktop andfromwithinanapplicationsuchas Photoshop or Illustrator.Ifyouencounterproblems,seeour troubleshootingdocument. Ifyoustillrequireassistancewithyoursinglesign-onconfiguration,navigateto Support inthe AdobeAdminconsole,andopenaticketwithCustomerSupport.MorelikethisIdentityoverviewSetupidentityManageproductsManageprofilesAddandmanageusersTroubleshooterrorsУвійдітьдообліковогозаписуУвійтиКеруванняобліковимзаписомШвидкіпосиланняПереглянутивсівашіпланиКеруваннявашимипланамиLegalNotices   |   OnlinePrivacyPolicyEnterprise&Teams<ОглянутивсіпрограмиНавчанняйпідтримкаПочатокроботиПосібниккористувачаСпитайтеспільнотуПублікуйтезапитаннятаотримуйтевідповідівідекспертів.ЗапитатиЗвернітьсядонасРеальнадопомогавідреальнихлюдей.Розпочати^ УгоруLanguageNavigationLanguageNavigationОберітьсвійрегіонВибіррегіонупризведедозміненнямовита/абоконтентувеб-сайтуAdobe.com.AmericasBrasilCanada-EnglishCanada-FrançaisLatinoaméricaMéxicoUnitedStatesAsiaPacificAustraliaHongKongS.A.R.ofChinaIndia-EnglishNewZealandSoutheastAsia(IncludesIndonesia,Malaysia,Philippines,Singapore,Thailand,andVietnam)-English中国中國香港特別行政區台灣地區日本한국Europe,MiddleEastandAfricaAfrica-EnglishBelgië-NederlandsBelgique-FrançaisBelgium-EnglishČeskárepublikaCyprus-EnglishDanmarkDeutschlandEestiEspañaFranceGreece-EnglishIrelandIsrael-EnglishItaliaLatvijaLietuvaLuxembourg-DeutschLuxembourg-EnglishLuxembourg-FrançaisMagyarországMalta-EnglishMiddleEastandNorthAfrica-EnglishNederlandNorgeÖsterreichPolskaPortugalRomâniaSchweizSlovenijaSlovenskoSuisseSuomiSvizzeraTürkiyeUnitedKingdomБългарияРоссияУкраїнаالشرقالأوسطوشمالأفريقيا-اللغةالعربيةישראל-עבריתSverige
helpx.adobe.com - Pages
Hot Host
Quickly calculate the estimated worth of your page and build reports as table.Youtube Video Analyticssitemap