Education Deployment Setup with Roster Sync

Last updated on Jun 11, 2025
Note

Roster Sync is currently available for K-12 in the US

This page will guide you through setting up the Adobe Admin console with Rostering Users and licenses. 

Automated setup using Roster Sync (K-12)

Adobe supports syncing users from Roster data provided by Clever or Classlink; the roster sync is configured in the directory sync option.

Other Education Setup Guides

Roster Sync Setup Steps

  1. Create a directory 
  2. Configure a Federated Directory
  3. Claim Domain/s
  4. Configure Roster Application
  5. Enable SSO from Roster Portal
  6. Configure Directory Sync with Roster Solution

Setting up a new Federated Directory for Roster Sync

Create a Directory

Adobe Admin Console > Settings > Create Directory

Enter a name for the directory, an internal name, not shared publicly and select Federated Directory.

A screenshot of the Create Directory wizard with a text box for the name of the directory and two cards one for Federated ID and the other for Enterprise ID. The Federated ID card is selected.

Configure a Federated Directory

Follow Azure/Entra, Google, or SAML steps to configure the federated directory with your identity provider.

  • Google Federated Directory Setup
  • Microsoft Azure Federated Directory Setup
  • SAML Federated Directory Setup
A screenshot of the create federated directory wizard displaying the options for Azure, Google and Other SAML

On the confirmation screen, turn off auto account creation. In this setup, users are created and managed via sync.

Claim Domain/s

Once the directory screen is completed, claim domains using a Microsoft Global Admin Account or a Google Super Admin; this will list all available Domain/s in your identity provider console. If your organization is not using Azure/Entra or Google, you can validate domain ownership by creating a DNS text record with your domain registrar.

A screenshot of an admin claiming domains in the adobe admin console

Configure Roster application

Clever

In Clever, request Adobe Express and, if needed, Adobe Creative Cloud

You will receive a link to book a call with an Adobe rep.
The Adobe rep will confirm your settings, and you will then need to configure your sharing rules for the apps.

Classlink

In Classlink install Adobe Express and, if needed Adobe Creative Cloud in the Roster server. 
There is no approval required to access these apps. 

Once you have installed the App in Clever or Classlink, configure your sharing rules in your roster tool. If you enable a sync without any users configured the following step will fail.

For full details of setting up Roster sync visit our Roster Sync detailed guide.

Add domains from Google screen with options to select domains from Google to claim in Adobe Admin Console

Enable SSO from Roster Portal

To support SSO from your portal, add a secondary idp for your provider.

Adobe Admin Console > Settings > Directory > Authentication > Add new ipd > Education Portal SSO >  Select Clever or Classlink and accept the default options.

This will enable users to click on the app tile in your portal to log in. This is also a critical step for you to complete roster sync setup as it allows you as an admin to share roster from portal to Adobe.

 

A screen showing add identity provider with Edu Portal and LMS SSO highlighted

Configure Directory Sync with Roster

Adobe Admin Console > Settings > Identity settings > Roster Sync > Add sync

Select your Roster provider and follow the guided steps. The roster sync will automatically place users in user groups based on your selected grouping rule.

Note

To control Generative Ai in K-12, edit the product profile for roster sync.
Adobe Admin Console > Products > Selected product > Product Profile > Details

Generative Ai is controlled by the Firefly toggle (K-12)


Post K-12 Rotering Setup

After Completing the setup, additional options

Share the Quick Login URL with your users.

The URL presented at the final stage of the process will take a user who clicks on the link directly to Google or Microsoft to authenticate. Once authenticated, they will be taken directly into Adobe Express for K-12.

Suggested locations for this URL

  • Managed Bookmarks
  • District Launchpads
  • Email

Google Workspace Admin Only

A computer screen shot of a colorful backgroundDescription automatically generated

Pin Adobe Express SSO Launch URL to the taskbar of a Chromebook

In the Google Admin Console > Apps & Extensions https://admin.google.com/ac/chrome/apps/user add the following as a URL:

https://new.express.adobe.com/chrome-tab/a/domain.org

Replace domain.org with a domain claimed in your Admin Console federated directory.

To pin the icon to the taskbar, select Force install + Pin to ChromeOS taskbar.