Go to Adobe Admin Console Identity settings section.
-
Setup and onboarding
- Explore Adobe Admin Console
- Sign-in and access
-
Plan your deployment
- Basic concepts
- Deployment Guides
-
Deploy Creative Cloud for education
- Education Deployment Home
- Education Deployment K-12 Onboarding Wizard
- Education Deployment Simple Setup
- Education Deployment Setup With User Sync
- Education Deployment Setup with Roster Sync
- Education Deployment Key licensing Concepts
- Education Deployment Setup Concepts
- Education Deployment Quick Tips
- Approve Adobe apps in Google Admin Console
- Enable Adobe Express in Google Classroom
- Integrate Adobe Creative Cloud and Adobe Express with Canvas LMS
- Adobe Creative Cloud & Blackboard Learn
- Configuring SSO for District Portals and Learning Management Systems
- Roster syncing for license assignment with the Adobe Admin Console
- Kivuto FAQ
- Primary and Secondary Institution Eligibility Guidelines
-
Licensing
- Licensing overview
- Licensing types
-
Set up your organization
- Identity overview
- Set up identity and Single Sign-On
- Set up organization with Enterprise ID
- Setup Azure AD federation and sync
- Set up Google Federation and sync
- Configure Microsoft AD FS for use with Adobe SSO
- Configuring SSO for District Portals and Learning Management Systems
- Set up organization with other Identity providers
- SSO common questions and troubleshooting
- Set up Frame.io for enterprise
-
Identity and SSO
- Set up identity
- Integrate with Microsoft Entra
- Integrate with Google Sync
- Integrate with other SSO providers
- Troubleshoot
-
Manage your organization setup
- Manage existing directories and domains
- Enable automatic account creation
- Domain Enforcement for restricted authentication
- Set up organization via directory trust
- Migrate to a new authentication provider
- Asset settings
- Manage authentication settings
- Limit product access by IP addresses
- Privacy and security contacts
- Console settings
- Manage encryption
-
Directories, domains, and access
-
Directories and domains
- Create a directory for SAML identity providers
- Verify domain ownership
- Set up domains for directory authentication
- Move domains across directories
- Encrypted and trusted directory domain transfers
- Move directories between Admin Consoles
- Delete directories and domains
- Automatic account creation overview
- Enable automatic account creation
- Automatic federated account creation FAQ
- Domain enforcement
- Directory trusting
-
Directories and domains
-
Manage users
- Adobe Admin Console users
- Administrative roles
- Assign user roles for granular access control
- How to create custom roles
- Manage Frame.io account roles in Adobe Admin Console
- User management strategies
- Assign a license to teams user
- Team Management: Creative Cloud desktop app, Acrobat, Express
- Adobe's matching service
- Edit user identity type
- Manage user groups
- Manage directory users
- Exclude specific users from domain enforcement
- Manage developers
- Migrate existing users to the Adobe Admin Console
- Migrate Frame.io user management to the Adobe Admin Console
- Admin roles and hierarchy
- Enterprise admin permissions matrix
-
Settings
- Asset settings
- Manage encryption
-
Manage products and entitlements
-
Manage products and product profiles
- Manage products on Admin Console
- Add products and licenses
- Manage product profiles for enterprise users
- Manage automatic assignment rules
- Adobe Express Photos FAQs for administrators
- Assign users to Firefly custom models
- Enable Shared Credits for your organization
- Manage product requests
- Manage self-service policies
- Manage app integrations
- Manage product permissions in the Admin Console
- Single App | Creative Cloud for enterprise
- Manage Shared Device licenses
-
Manage products and product profiles
-
User management
- Understand user management
- Manage users and groups
- Manage admins
- Manage user roles
- Migrate users
-
Get started with Global Admin Console
- Adopt global administration
- Select an organization in the Global Admin Console
- Manage organization hierarchy
- Manage product profiles
- Manage administrators
- Manage user groups
- Create license assignment reports for multiple organizations
- Update organization policies
- Manage policy templates
- Allocate products to child organizations
- Execute pending jobs
- Download audit logs and export reports
- Export or import organization structure and product allocations
-
Products and entitlements
- Manage products
- Manage product profiles
- Special programs plans
- Manage entitlements
- Manage automatic assignment
- Manage product access
- Manage self-service policies
- Manage app integrations
- Frame.io integration
- Manage product permissions
-
Manage storage and assets
- Storage
- Manage projects
- Asset migration
- Reclaim assets from a user
- Student asset migration | EDU only
- Manage storage and assets
-
Manage services
- Manage services in the Admin Console
- Configure services
- Optional services
- Adobe Stock
- Enable Shared Credits for your organization
- Custom fonts
-
Adobe Asset Link
- Adobe Asset Link
- Adobe Asset Link Overview
- Create user group for Adobe Asset Link
- Configure Experience Manager Assets as a Cloud Service
- Deploy Adobe Asset Link
- Configure Adobe Experience Manager 6.x Assets for Adobe Asset Link
- Manage assets using Adobe Asset Link
- Adobe Asset Link for Adobe XD
- Troubleshoot Adobe Asset Link
- Known issues with Adobe Asset Link
- Adobe Acrobat Sign
-
Deploy apps and updates
- Overview
-
Create packages
- Packaging apps via the Admin Console
- Create Named User Licensing Packages
- Manage pre-generated packages
- Manage Packages
- Customize packages
- Deploy Packages
- Manage updates
- Adobe Update Server Setup Tool (AUSST)
- Adobe Remote Update Manager (RUM)
-
Deploy apps and updates
- Prepare for deployment
- Manage pre-generated packages
- Create packages
- Customize end-user experience
- Deploy packages
- Use third-party deployment tools
-
Manage Shared Device Licensing (SDL)
- Shared Device Licensing overview
- Deploy Shared Device Licensing
- Manage SDL profiles and user access
- Activate shared device licenses
- Use the Shared Device Licensing toolkit
- Recover shared device licenses
- Shared Device Licensing identity FAQ
- Shared Device Licensing deployment FAQ
- Shared Device Licensing access FAQ
- Known issues in Shared Device Licensing
- Adobe Update Server Setup Tool (AUSST)
- Adobe Remote Update Manager (RUM)
- Troubleshoot
-
Manage your Teams account
- Manage your account
- Complimentary membership for team members
- Update payment details on your Teams account
- Download and email invoices
- Change the contract owner of your Teams account
- Change your Creative Cloud for teams plan
- Change reseller
- Cancel Creative Cloud for teams licenses
- Purchase Authorization Compliance
- Contracts and renewals
- Renewals
- Reports and logs
-
Manage contracts
- Automated expiration stages for ETLA contracts
- Switching contract types within an existing Adobe Admin Console
- Manage trials and special offers
- Complimentary membership for team members
- Creative Cloud for enterprise - free membership
- Frame.io and Creative Cloud for teams and enterprise plans
- Value Incentive Plan (VIP) in China
- VIP Select Help
-
Get started with Global Admin Console
- Get started
- Manage your organization
- Reports audit
-
Get help
- Enterprise and teams | Contact Adobe Customer Care
- Support options
- Teams | Support and Expert Sessions
-
General troubleshooting
- Microsoft Purview Information Protection support in Acrobat
- Use the Creative Cloud Cleaner tool to fix installation issues
- Fix app launch errors on Shared Device Licensing machines
- Technical support boundaries for virtualized or server-based environments
- Resolve trial and license expired errors
- Migrating to OAuth Server-to-Server Credentials
- Manage device authentication for Creative Cloud and Acrobat Pro
- Enterprise | Support and Expert Sessions
Set up Identity provider initiated login for users
Last updated on
Feb 11, 2026
Identity provider-initiated login enables users to access Adobe apps directly from your identity provider (IdP), giving them a faster and error-free sign-in experience.
Make sure you've the following before you set up IdP-initiated login:
- Adobe Admin Console system admin credentials
- Identity provider admin credentials
You can configure IdP-initiated login for any of the following Adobe web apps:
- Adobe Home
- Experience Cloud Home
- Adobe Express
- Workfront
- Adobe Experience Manager
- Marketo Engage
- Faster entry into Adobe apps directly from IdP
- Customizable user experience via optional RelayState configuration
- Better alignment between Adobe Admin Console and IdP workflows
- Centralized authentication for admins
If you are getting started with the Adobe Admin Console, you must set up a directory via Google federation or any other SAML-based IdP. Refer to Common questions for help regarding setting up your SAML-IdP portal.
Your Admin Console directory with SAML federation setup automatically supports IdP-initiated login. All users in this directory can use the Adobe app on IdP to launch Adobe Home by default.
You can customize which Adobe web app you want your users to launch by following the steps:
Go to the SAML RelayState tab and select Copy URL next to the app where you want your users to land when using IdP-initiated login.
Go to your IdP portal and paste the copied Adobe app link to the appropriate field. Different identity providers use different names for the app link field. Refer to some examples below:
| Identity provider | Entry field for copied app link |
|---|---|
| Okta | Default Relay State |
| Microsoft Azure AD | Relay State |
| Start URL | |
| Ping Federate | Relay State |
| OneLogin | Relay State |
Note
- If you leave the RelayState value empty in your IdP portal, Adobe Home becomes the default destination when your users sign in via IdP-initiated login.
- If you're configuring IdP-initiated Login for Microsoft Azure, then make sure to leave the Sign on URL field empty in Azure Portal. Any value entered in the Sign on URL field blocks IdP-initiated login and only allows SP-initiated login.
Once you've completed the setup, users can access the Adobe web app from their identity provider.
For example: Adobe app in Google App Launcher takes users to Adobe Express web if the RelayState value is Adobe Express.
Yes. IdP-initiated login only supports authentication to Adobe's web applications.
Identity providers have distinct fields where you have to enter the app link copied from Adobe Admin Console. Refer to your IdP's technical documentation to learn about the IdP setup. Some widely used IdP documentations are listed below:
- Google Workspace Admin help: Set up your own custom SAML app
- Okta Support Center: How to Redirect Users to Specific Page During SAML SSO
- Microsoft AD FS: Set up a SAML 2.0 provider with AD FS
- Microsoft Entra: Enable SAML single sign-on for an enterprise application
Some IdPs allow multiple applications to use the same SAML 2.0 configuration. If your IdP supports this model, you can configure multiple RelayState destinations without needing additional SAML setups.
If your IdP requires a separate SAML configuration for each RelayState or SAML application, then you can only configure a single SAML application on the IdP and choose only one available web app URLs as the RelayState.
IdP-initiated login is only available for SAML-based identity providers. You won't see the SAML RelayState setting if you have set up your directory using an OIDC-based identity provider. For example, Azure AD OIDC setup.
No. Only SAML-based setups are supported.
Ensure the app link in the IdP exactly matches the link copied from the Adobe Admin Console. Any change to the link may cause an error.
If users continue to face a sign-in error, check and confirm that the user is attempting to sign in from the IdP portal or application tile. Sign-in attempts initiated from other entry points, such as email links, bookmarks, or direct URLs, are not considered IdP-initiated login.
