Sign in to the Admin Console and go to Users.
If you are already using an identity type and need to edit your identity model, you can change your end user's identity type as a System administrator.
Introduction
As a system admin, you can edit the following identity types of your users on the Adobe Admin Console:
- Enterprise ID to Federated ID
- Federated ID to Enterprise ID
- Adobe ID to Enterprise ID or Federated ID
You need a new or existing directory to change a user's identity type from Enterprise ID to Federated ID, or vice versa (see the introduction to identity setup). For more details, see move domains across directories.
Migration workflows
The following matrix provides an overview of the identity type migration workflows:
Scenario |
How to |
What happens to user assets |
Notes |
Adobe ID to Enterprise ID |
In the Admin Console, go to Users and choose Edit Identity Type by CSV. |
Assets are auto-migrated. |
Identity setup is required before migration. Migration is unavailable for users with both Creative Cloud and Marketing Cloud on the same console. To avoid sign-in issues, ensure all user information uploaded via CSV matches your directory. |
Adobe ID to Federated ID |
In the Admin Console, go to Users and choose Edit Identity Type by CSV. |
Users with Creative Cloud entitlements: assets are auto-migrated. Users with Document Cloud or other non-Creative Cloud entitlements: assets are not auto-migrated. Manual migration is required. |
Same notes as Adobe ID to Enterprise ID. |
Adobe ID to Federated ID (Azure and Google Sync) |
1. First, set up sync to have the users created. 2. Use the Edit Identity Type by CSV workflow. For migration, users must exist in the Admin Console. |
Users with Creative Cloud entitlements: assets are auto-migrated. Users with Document Cloud or other non-Creative Cloud entitlements require manual migration. |
Same notes as Adobe ID to Enterprise ID. |
Enterprise ID to Federated ID |
Change the directory that the domain is linked to. Users are migrated automatically. |
Assets are auto-migrated. |
Adobe recommends that you do not migrate users in encrypted directories or organizations. |
Federated ID to Enterprise ID |
Change the directory that the domain is linked to. Users are migrated automatically. |
Assets are auto-migrated. |
Adobe recommends that you do not migrate users in encrypted directories or organizations. |
Users' assets in different regions are not automatically migrated. Manual migration is required. For details on regions, see Regions and Availability Zones. |
|||
Impact on end users
If you edit the identity type of users from Adobe ID to Federated ID or Enterprise ID, the users continue to have access to their personally owned Adobe ID. However, they access the organization’s Adobe apps, services, and solutions through the new Federated ID or Enterprise ID assigned to them.
If your Creative Cloud end users already have an Adobe ID with linked assets, they can migrate assets from their Adobe ID account to their new enterprise account.
- The CSV file used in the procedure may use a comma (,) or a semicolon (;) as the separator.
- You can also edit user details, such as email addresses and names, for users using the Admin Console, User Sync tool, or the User management API.
- Allow Azure Sync to synchronize the users before uploading the CSV to do the identity type switch.
Select the More Options
icon, and select Edit Identity Type by CSV from the drop-down list.
To include the users whose identity type you want to edit, download the current user list, CSV standard template, or domain user list by selecting Download CSV Template.
|
Field Name |
Description |
|---|---|
|
Identity Type |
The identity type currently assigned to the user. |
|
User name |
Username as it corresponds to the respective user ID. |
|
Domain |
The claimed domain as it corresponds to the Enterprise or Federated ID. |
|
New Identity Type |
Enter the identity type that you want to change to. This value controls the ID type assigned to the user. Not case sensitive. The ID type must be valid for the domain. Valid values:
|
|
New Email |
Valid email address. 60 character maximum. A name and domain. If the identity type is Enterprise ID or Federated ID, the organization must claim and activate the domain. For other account types, it’s the email address used for the user and account name. |
|
New user name |
Restricted to ASCII. Username as it corresponds to the respective user ID. For Business or Adobe ID type users, the username that is defined for the Business or Adobe ID of the user. Only used in Enterprise administered domains. Account name to be used for this user. Restrictions to an email address and the same email address can be imposed by the domain owner. Maximum length is 255 characters. |
|
New Country Code |
A two-letter country code (for example, United States = "US"). If present, check to ensure that the user is from a country where Adobe does the business. It’s present for Enterprise administered accounts. To determine the Country Code, see https://www.iso.org/obp/ui/#home. For more information, see ISO 3166-1 alpha-2 Country Codes. |
Open the CSV file in an application that can edit CSVs (such as Microsoft Excel) and edit the identity types.
When you are editing the identity type from Adobe ID to Federated/Enterprise ID, the email address for Adobe ID or must match the one for the enterprise account.
Select Edit Identity Type by CSV dialog box and upload the updated CSV file.
Ensure that this file is saved with UTF-8 encoding.
Once the process is complete, you'll receive a notification email.
This process migrates the permissions and provisioned products for all migrated users. The users whose identity has changed, receive a notification to use their new Enterprise, or Federated ID account when working with the Adobe products they have been provisioned.
Migrating Adobe IDs to Enterprise or Federated IDs
If your users were previously using Adobe IDs and have linked assets, these users will be requested to consent to the Asset Migration process. The Asset Migration process automatically moves the users' assets from their Adobe ID account to their Enterprise account.
Asset migration
When you edit the identity type of the users from Adobe ID to Federated ID or Enterprise ID, users can migrate the supported content from their existing company-assigned Adobe ID account to their new enterprise account. The migration can be done in two ways:
For users to automatically migrate their content, they must be assigned access to storage/services for both Creative Cloud and Document Cloud. For users to have access to storage for Creative Cloud and Document Cloud, do one of the following:
- Assign a Product Profile that includes the Creative Cloud plan with storage and has PDF Services enabled.
- Assign a Creative Cloud Product Profile with storage, and a Document Cloud Product Profile with storage (excludes desktop-only offers) and PDF Services turned enabled.
All product licenses that the user is assigned to, must have storage included. Otherwise, Asset Migration fails. For example, an Adobe ID user allocated to a single app license for Photoshop with no storage and another single app license for XD with 100-GB storage cannot migrate the assets automatically.
After the migration is complete, the end-user receives an email notification with the details to migrate their assets.
You can download the Asset Migration completion status report for all the users that were part of the migration.
This report tells you who has granted consent, who has denied consent, and who hasn’t taken any action yet. To learn about the types of content the migration process supports, see the Asset Migration FAQ.
Go to Admin Console > Users.
Select the More Option
icon and select Export migration report to CSV from the drop-down list.
The report is downloaded.