Creative Cloud for education | Deployment Guide

  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
    3. Deploy Creative Cloud for education
      1. Deployment guide
      2. Integration with Canvas LMS
      3. Integration with Blackboard Learn
      4. Configuring SSO for District Portals and LMSs
      5. Kivuto FAQ
      6. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Set up identity
      1. Identity types | overview
      2. Set up organization with Enterprise ID
      3. Set up organization with Federated ID
        1. SSO overview
        2. Setup Azure Connector and sync
          1. Set up SSO with Microsoft via Azure OIDC
          2. Add Azure Sync to your directory
          3. Azure Connector FAQ
        3. Set up Google Federation and sync
          1. Set up SSO with Google Federation
          2. Add Google Sync to your directory
          3. Google federation FAQ
        4. Generic SAML
          1. Set up SSO with other SAML providers
          2. Set up SSO with Microsoft Azure ADFS
          3. SSO Common questions
          4. SSO Troubleshooting
        5. Education SSO
          1. Configure SSO for District Portals and LMS
          2. Common questions
          3. Dovetail
      4. Verify ownership of a domain
      5. Add and manage domains
      6. Link domains to directories
      7. Use directory trust to add pre-claimed domains
      8. Migrate to new authentication provider
    2. Asset settings
    3. Authentication settings
    4. Privacy and security contacts
    5. Console settings
    6. Manage encryption
  4. Manage products and entitlements
    1. Manage users
      1. Overview
      2. Administrative roles
      3. User management techniques
        1. Manage users individually   
        2. Manage multiple users (Bulk CSV)
        3. User Sync tool (UST)
        4. User management API (UMAPI)
        5. Microsoft Azure Sync
        6. Google Federation Sync
      4. Change user's identity type
      5. Manage user groups
      6. Manage directory users
      7. Manage developers
      8. Migrate existing users to the Adobe Admin Console
      9. Migrate user management to the Adobe Admin Console
    2. Manage products and product profiles
      1. Manage products
      2. Manage product profiles for enterprise users
      3. Manage self-service policies
      4. Manage app integrations
      5. Manage product permissions in the Admin Console  
      6. Enable/disable services for a product profile
      7. Single App | Creative Cloud for enterprise
      8. Optional services
    3. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Migrate from Device Licensing
      6. Manage profiles
      7. Licensing toolkit
      8. Shared Device Licensing FAQ
  5. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    3. Reclaim assets from a user
    4. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  6. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager 6.x Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Sign
      1. Set up Adobe Sign for enterprise or Teams
      2. Adobe Sign - Team feature Administrator
      3. Manage Adobe Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
      2. Getting started
  7. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Adobe templates for packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages with SCCM
      3. Deploy Adobe packages with ARD
      4. Install products in the Exceptions folder
      5. Uninstall Creative Cloud products
      6. Use Adobe provisioning toolkit enterprise edition
      7. Adobe Creative Cloud licensing identifiers
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Use Adobe Remote Update Manager
      2. Channel IDs for use with Adobe Remote Update Manager
      3. Resolve RUM errors
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
      3. Creative Cloud package "Installation Failed" error message
    9. Create packages using Creative Cloud Packager (CC 2018 or earlier apps)
      1. About Creative Cloud Packager
      2. Creative Cloud Packager release notes
      3. Application packaging
      4. Create packages using Creative Cloud Packager
      5. Create named license packages
      6. Create packages with device licenses
      7. Create a license package
      8. Create packages with serial number licenses
      9. Packager automation
      10. Package non-Creative Cloud products
      11. Edit and save configurations
      12. Set locale at system level
  8. Manage your account
    1. Manage your Teams account
      1. Overview
      2. Update payment details
      3. Manage invoices
      4. Change contract owner
    2. Assign licenses to a Teams user
    3. Add products and licenses
    4. Renewals
      1. Teams membership: Renewals
      2. Enterprise in VIP: Renewals and compliance
    5. Purchase Request compliance
    6. Value Incentive Plan (VIP) in China
    7. VIP Select help
  9. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  10. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

This document is intended to walk K-12 (Primary & Secondary) schools and districts through the deployment of named user licenses of Adobe Spark, All Apps, or other Adobe products to students, teachers, and faculty.

Getting Started

As the IT Administrator of your school, if you already have Adobe products, Spark with Premium Features is available on your Adobe Admin Console.

  1. Sign in to the Admin Console.

    In addition to the licenses purchased, the Products page shows New Free Offer cards for Spark.

    New Free Offer cards

  2. Click Getting Started.

  3. On the Confirm Type of Organization screen, select the category that your organization belongs to.

    Agree to the terms and conditions, if you select K-12, Primary & Secondary Education.

  4. Click Confirm and Continue.

    The Products page shows the card for Spark. You can now start deploying Spark for your users.

    Card for Spark

  1. Identify the domain administrator in your school/district.

    The school/district owns the named user licenses given to K-12 (Primary/Secondary) students (For Adobe Spark or All Apps). So, these licenses must be deployed using Enterprise or Federated IDs. As part of the setup, you have to prove that you own the domain, by updating the DNS records. If you do not have access, ensure that you let the domain admins know to make that update for you.

  2. Plan the Identity system for your organization. Decide if you want to set up Enterprise ID users or Federated ID type users.

    Enterprise ID

    Your organization owns and manages the Enterprise IDs. End users sign in using the passwords they specify to sign in.

    Federated ID

    Federated IDs allow users to sign in using your organization's Single-Sign On (SSO). End users sign in using the same user name and password that they use for signing in to all other apps and services. For example, Google or Active Directory File System (ADFS).

    Adobe ID

    Not Supported. Only Enterprise and Federated IDs are permitted for K-12 (Primary/Secondary).

  3. If you want to set up single sign-on (SSO), identify the administrator for the school-provided IDs (login credentials).

    If students have Google Suite IDs provided to them, and you want them to use these IDs to sign in to Adobe apps, use Federated IDs and set up SSO. If you do not want to set up single sign-on, use Enterprise IDs.

To use Federated ID authentication, you must have a SAML2-compatible Identity Provider.

The Adobe Admin Console allows a cloud-to-cloud integration with Google Federation ID and Azure Active Directory to turn the following into a simple authentication workflow:

  • Domain claiming
  • SSO setup
  • Automated User Management

With Azure AD, you can even sync user groups.


1. Set up Identity

  1. Sign in to the Admin Console, navigate to Settings > Identity, and click Create Directory.

    Create Directory

  2. Enter a name for the directory and choose an identity type.

    Choose Enterprise ID and click Create Directory, or choose Federated ID and click Next.

  3. (Federated ID only)

    On Who is your identity provider screen, do one of the following:

    Identity Provider

2. Test your setup

To test your setup, you can add a user, and sign in using the new user account. You can choose an existing email address that you have access to or create one for this test.

To add a user, do the following:

  1. In the Admin Console, navigate to Users Users, and click Add User.

  2. Enter the email address of the user. The recommended ID Type is populated automatically.


    Use an email address that belongs to one of the claimed domains. Do not change the ID Type to Adobe ID.

  3. Enter the First Name and Last Name of the user.

    For an Enterprise ID, select the Country of the user. For a Federated ID, enter an SSO Username and select the Country of the user.


    First Name and Last Name are mandatory, even though erroneously indicated as optional.

  4. Select the products or user groups to assign to the user. The list of products that displays, is based on the purchase plan of your organization.

    Learn more on how to manage products and product profiles.

    Assign products

    Once you've successfully created the user and assigned a product, you receive an email on the associated email account. Follow the instructions in the email.

To sign in as the user that you created, open the website for Adobe Spark, click Sign In > Log In With School Account. Then, sign in using your email address and password.

Adobe Spark sign in


If the email address has both, a personal Adobe ID (created by the end user) and a school ID (Enterprise ID or Federated ID created in the Adobe Admin Console), you see the account chooser screen. To sign in with your new enterprise account, choose Enterprise ID.

If you are using Federated IDs, you are redirected to the sign-in screen of your IdP (For example, Google). Enter the email address for the user, click Next, and follow the instructions on the screen.

3. Manage Users

Product Profiles let you enable all or a subset of Adobe services available in the plan you have purchased from Adobe. They let you customize settings associated with a given product and plan.

For a user to be entitled to use a product or a service, the user must be part of a Product Profile. You can assign licenses to a Product Profile by associating it with a plan that you have purchased. A user could belong to multiple product profiles, each conferring different licenses to the user. The final eligibility of a user is the union of all licenses conferred by each Product Profile to that user. To know more about Product Profiles, see Manage product profiles.

  1. In the Admin Console, navigate to Products.

    A list is displayed of all Adobe product plans for which you are an administrator.

  2. Select the desired product plan, and click New Profile.

    The Create a New Profile wizard displays.

  3. Enter a profile name, display name, and description.

    To automatically notify users by email when they are added or removed from this profile, enable the Notification toggle, and click Next.

  4. On the Quota screen, choose the target number of licenses allotted for this profile, and click Next.


    Quotas are not applicable for Adobe Spark for education plans.

  5. On the Services screen, you can choose to enable or disable individual services for the Product Profile.

    Services screen

  6. Click Save to save the new profile.

Adobe recommends creating user groups to provide access to products and services. You can either create one group and add all users to it, or create separate groups for departments, programs, or roles (student, teacher, staff).

Creating multiple user groups is useful:

  • If you are planning to give different products to certain groups of users. For example, Creative Cloud- All Apps to high school students, and Adobe Spark to all students.
  • If you want to give limited administrative rights. For example, the department head can add or remove users from their department so that central IT does not have to.

To create a user group, do the following:

  1. In the Admin Console, navigate to Users > User Groups, and click New User Group.

  2. Enter a name and description for the user group and click Save.

    The description does not play any role in the setup and is for information purposes only. However, enter a name and description that indicates the purpose of the group.

    Create a user group

  3. Also, you can add an admin specific to a user group, called the User Group Administrator.

    To add a User Group Administrator, click the group name. Navigate to Admins, and click Add Admin.

  4. Enter the email address for the admin. You can search for existing users or add new users by specifying a valid email address, and filling the information on the screen.

    Click Save.

    Add an admin

  5. To manage the entitlements given to users, assign Product Profiles to the user group.

    Click the group name, navigate to Assigned Product Profiles, and click Assign Product Profile.

    Assign product profiles

  6. Add the desired Product Profiles to the user group, and click Save.

    Assign Product Profiles

The user group is now ready, you can now start adding users to the group.

When you assign an admin role or a Product Profile to users, they receive an email notification. Users must follow the link to complete their profile, if prompted.

To add multiple users to your organization and provision them to product profiles, you can upload a comma-separated list with the details of all the users. Using the CSV upload, you can import up to 5,000 users at a time.

If you want to automate the user management process, you can use the User Sync tool. This method requires additional software be installed in your network to synchronize users between your Directory and Adobe. However, for large districts with sufficient IT resources, Adobe recommends using the User Sync tool. To learn more, see Set up the User Sync tool or enroll in our Self-paced User Automation course using a free Adobe Captivate Prime account.

To add multiple users in bulk via the Admin Console, do the following:

  1. In the Admin Console, navigate to Users and click Add Users by CSV.

  2. In the Add Users by CSV dialog box, click Download CSV Template, and choose Standard template.

  3. Open the downloaded CSV template in a spreadsheet editor like Microsoft Excel, and paste your users into the template like the screenshot below.

    For a description of the fields in the downloaded file, see CSV File format.

    For Enterprise IDs and Federated IDs, columns A to G are mandatory. 

    If you are using user groups to manage access to products, assign users to the appropriate groups using columns K and L. In this case, you can leave the other cells empty.


    This feature does not support user names having special characters, such as the comma (,) and the semicolon (;).

  4. Drag the updated CSV on to the Add Users by CSV dialog box and click Upload.


    You can upload a CSV file size of up to 10 MB.

    For more information on bulk operations, see Manage Users and Bulk Operations.

After you have successfully assigned product profiles or administrative rights to the users, they receive a welcome email.

Welcome Email

The users can click Get Started in the email, sign in, and start using the allocated services. 

To sign in to Adobe Spark with a Google Federated ID account, open Adobe Spark, click Log In > Continue With Google. Then, sign in using the email address and password.

Sign in with Google

If the users do not have a Google account, follow the steps described under Sign in as the new user.

Adobe has created a few printable handouts for your use.

After deploying Adobe Spark or Creative Cloud Named User Licenses or Shared Device Licenses in your district, you can give these handouts to the teachers to help them get started with Adobe in their classes. These handouts help teachers and students get the most from Spark and Creative Cloud, in the classroom and at home.


As a first step for any issues, see the Admin guide and search for articles on Enterprise Learn & Support page.

If running into an error specifically with SSO, see Troubleshooting errors. And, for SSO issues related to your IdP, reach out to the support center for your identity provider.

To troubleshoot issues related to bulk upload, see Troubleshoot bulk upload.

When contacting Adobe Customer Care to report a suspected SSO issue, provide the following to ensure fast and effective service from Adobe Customer Care.

  • Number of affected user accounts
  • Adobe domain name
  • Affected login and email name (must be identical)
  • Full contact details of the user
  • Date and time range the issue occurred
  • Screenshots or video of the user experience workflow shown from a signed out user state then attempting to sign in via
  • A SAML trace output captured during the demonstration workflow. SAML trace requires no special skills or permission to use (non admin is OK) and is available on many browsers. (For example, Firefox and Chrome)

To use the SAML trace add-on, do the following.

  1. Install SAML trace add-on in user browser.

  2. Ensure that the user is signed out of Adobe account.

  3. Locate and click the SAML Trace window from the SAML icon in the toolbar.

    A separate window displays. Move it out of the way and leave it open.

  4. Navigate to, and click Sign In and proceed as far as possible through login.

  5. When the issue occurs, navigate to the SAML trace window as shown in the below screenshot.

    Locate and click the POST line in Orange with SAML tag that ends in ‘accauthlinktest’.

  6. Click SAML (next to HTML and Parameters).

  7. Copy all contents to text file and include with new support case.

  8. To perform SSO triage, locate the 4 mandatory SAML 2.0 assertions:

    1. NameID
    2. FirstName
    3. LastName
    4. Email
    • Case must exactly match that shown in the list above.
    • Check the values next to each and validate that each is populated.
    • Check Email matches NameID and conversely.
    • Check Email and NameID format are both correct and complete.

    A mismatch between the network user account and the Adobe user account name causes SSO to fail.

    Another good place to check when problems arise is the Adobe Admin Console under Settings - Identity - <click domain> - Event Logs. These logs are provided from the SP (Okta) syslog. There can be a few minutes delay for the log to update.

Adobe logo

Sign in to your account