Automatic federated account creation FAQ

Users without an Adobe account see the option to sign in with SSO and create a federated account on the Adobe sign-in screen during account creation. The option appears only if their email domain matches the domain of a federated directory enabled for automatic account creation.

Users with organization accounts can participate in collaboration and sharing workflows with team members. They can also request product access based on configured automatic assignment rules and product requests.

Only federated accounts currently support automatic creation. A future phase of Zero Touch Administration will enable automatic creation of other account types.

No. Only users with email domains claimed by your organization and added to a federated directory enabled for automatic account creation can create accounts. Users must successfully authenticate via single sign-on to complete account creation.

No. Automatic account creation only creates the federated account without assigning licenses. Users can request product access based on configured automatic assignment rules and product requests.

System Administrators and User Administrators can remove users who created federated accounts on demand from the User List. Removing users from the Directory User List permanently deletes their accounts and all license access.

Yes. Users can create on-demand federated accounts in directories with Azure Sync or Google Sync configured. Once created, the account falls under sync management and cannot be edited via the Admin Console unless sync is temporarily paused. If the user is added to the sync scope, their profile information updates via directory attribute mapping.

Only users creating accounts with organization-owned domains see the federated account creation option. Users with personal Adobe accounts using organization-owned email addresses must first change their account email address before creating a federated account with their organization domain.