User Guide Cancel

Manage existing directories and domains

Applies to enterprise.

After setting up the directories and associating them to users in the Admin Console, admins might need to realign the assignments later. Use this document to learn techniques to manage domains and directories to help you with your user management. 

Select a topic as per your requirement:

Move domains across directories. Learn more.

Remove domains and delete directories. Learn more.

Move a directory to a different Admin Console. Learn more.

Move domains across directories

Organizations can structure directories by moving domains from source directories to target directories within the Admin Console. You can reorganize domain-directory linking based on your organization’s needs without end users losing access to their products, services, or stored assets. Consolidating domains configured for the same identity provider into a single directory streamlines management for your IT teams.

If you plan to migrate domains from a directory to another one that contains a new identity provider (Azure, Google or other SAML) with SHA-2 authentication, you must replicate the new IdP setup in both the directories. The new IdP setup enables test login for users of all domains within the directory. Do the following based on your new identity provider:

  • For Microsoft Azure: Add a new Azure IdP to your directory and log into the same Azure tenant.
  • For Other SAML providers (including Google): Upload the same metadata file, which will point to the same SAML app on your IdP.

After the domain migration is complete, users, who are part of the new directory, will still have the ability to log in. This will eliminate downtime and ensure immediate access to their assigned Adobe apps and services. 

Caution:
  • Users are logged out of their accounts and cannot log in to a new session during a domain transfer. Editing directories in off-peak hours is recommended to minimize end-user disruption.
  • There are specific steps to migrate a domain that includes a trust relationship.  You should not revoke a trust relationship when migrating a trusted domain to prevent the loss of user account and product access in the trustee’s organization.
  • Before any domain migration, we strongly recommend that you export a user list from the Admin Console or Consoles involved prior to making changes. This list will provide a snapshot of all user data, including name, email, assigned product profiles, and assigned admin roles in the case a rollback needs to be performed.

Why move domains

You can benefit from this feature in the following scenarios:

  • You want to migrate an existing directory to another identity provider.
  • You have directories in a trust relationship or want to share directories for trusting, without allowing access to all domains within the trusted directory.
  • You have to group directories based on organization teams and departments.
  • You have several directories that are linked to single domains and want to consolidate.
  • You accidentally linked a domain to an incorrect directory.
  • You want to self-serve move a domain from Enterprise ID to Federated ID or Federated ID to Enterprise ID.

Handling encrypted or trusted directories

If the source or target directories are encrypted or are in a trust relationship, you are unable to move domains directly. Follow the given instructions to move domains in these cases:
 

Use case

Example

Suggested approach

To move domains between directories that are in the same trust relationship

Directory 1 and Directory 2 are configured in Console A and both have a trust relationship established with Console B.

Follow the move domain process.

To move domains between directories that are in trust relationships

* See Figure A for process diagrams

Directory 1 is configured in Console A and has a trust relationship established with Console B.

Within Console A, a domain in Directory 1 (Domain X) needs to move to Directory 2.

 

  1. Export a user list from the Console that owns the trust and all trustee Consoles prior to making changes.
  2. Establish a trust between all trustees and the destination directory (Directory 2) in Console A.
  3. Move domains from current directory (Directory 1) to destination directory (Directory 2) in Console A.
  4. Revoke a trust relationship from trustees in Directory 1 in Console A.
  5. Trustee removes revoked domain from Console B (repeat this step for additional trustees).
  6. When Directory 1 is in an empty state with no domains or trusts, you can delete the empty directory.

 

To move a domain or directory containing multiple domains to another Admin Console in your organization

Directory 1 is configured in Console A. But Directory 1 and its claimed domains need to move to Console B for ownership.

Reach out to Adobe Customer Care.

To move domains to or from an encrypted directory within the same Admin Console.

Directory 1 has encryption turned ON, and a domain from Directory 2 in the same Admin Console requires migration to Directory 1.

Moving domains to or from an encrypted directory is currently not supported.

Original state

Original state

Trusting State

Trusting state

Migrated State

Migrated State

How to move a domain

Follow the process below to transfer domains from a source directory to a target directory:

  1. Sign in to the Adobe Admin Console and go to Settings.

  2. Navigate to Domains and select the domains you want to move to the target directory. Then, select Transfer domains from the   menu.

  3. Select a directory from the dropdown on the Transfer domains screen. Use the Get notified toggle to switch completion notifications on or off. Then, select Transfer.

You are sent to the Domains section under Settings > Identity. All the domains with their status are listed.

Once the domains have been transferred successfully, the system admins receive an email about the domain transfer. Next, you can edit directory names and delete empty directories as required.

Move a directory to a different Admin Console

If your organization uses multiple Admin Consoles to manage users and entitlements, you might need to move one set of users from one Admin Console to the other. Use the Admin Console to request to migrate a directory to a different Admin Console owned by your organization.

This type of migration can only be performed for two Admin Consoles under the same ownership and with Adobe's assistance. An Adobe representative will work with you to plan & schedule that migration if this is the right option.

Why move a directory

You can benefit from this feature in the following scenarios:

  • You want to change the ownership of a directory from System Admins in one organization to another.
  • You need to consolidate or centralize your identity management.
  • You need to isolate or de-centralize your identity management.
  • You plan to decommission an organization that has a directory setup.
  • You have to group directories based on organization teams and departments.
Note:
  • If you have users associated with multiple domains, you can first move domains into a single directory, then move the directory to another Admin Console using the process below.
  • You DO NOT need to migrate your directory to a different Admin Console if you are switching to a new contract. You can add a new contract to an existing Admin Console when switching from an expiring contract. Learn more.
  • Currently, you can only move directories across Admin Consoles where both the source and destination consoles reside on Adobe's user storage model.

How to move a directory

Follow the process below to move a directory to the desired Admin Console:

  1. Sign in to the Admin Console, navigate to the Support section, and Create new case.

  2. Navigate to Manage users and licenses > Create Case, then enter Directory Move in the Summarize the issue field.

  3. Describe your request with the relevant details, such as the organizations (Admin Consoles) you'd like to move the Directory between.

    If you have been provided with a "checklist" by your current Adobe representative (not mandatory), please attach that checklist to the support ticket or mention their name to the request. 

    Then, select Submit.

  4. An Adobe representative will contact you regarding any details of your request. Work with the representative to schedule a time slot to avoid any disruption during the minor downtime during migration.

Note:

If your directory is integrated with automated sync, such as Azure Sync or Google Sync, User Sync Tool, or the User Management API, you'll be asked to pause the sync while the migration is processed. Then, resume sync once the associated directory is migrated to the target Admin Console.

Delete directories and remove domains

You can delete directory and domains from the Admin Console that are no longer in use.

Get help faster and easier

New user?

ICYMI Promo

Updates and Releases!

In case you missed it follow this page to stay updated!

Updates and Releases!

In case you missed it follow this page to stay updated!

ICYMI Promo

Updates and Releases!

In case you missed it follow this page to stay updated!

Updates and Releases!

In case you missed it follow this page to stay updated!