User Guide Cancel

Role sync for Education

Applies to enterprise.

Overview

To enable tailored experiences, enhance security, and ensure compliance, admins now can add educator and student tags to users in the Adobe Admin Console for existing Azure syncs and new Azure setups. After you have set up an Azure sync, you can add an attribute mapping to indicate which users are educators and which are students. 

In the future, these educator and student tags will allow Adobe to display tailored experiences to educators and students based on their role. For example, educators will be able to set up classrooms of their students and monitor progress on assignments, see lesson plans that are hidden from students, and more. To unlock these future educator-specific developments, please follow the steps below.

Prerequisites

  • Microsoft Azure AD is set up in your institution.
  • A distinct way to Identify Students and Educators (for example, teachers have JobTitle attribute filled out in Azure; students have unique email domain; student emails all start with similar prefix; etc.) 
  • Microsoft Azure Sync already set up to sync users in the Adobe Admin Console. Learn how to setup Azure sync.

Steps to perform role sync

  1. Sign into Azure AD with an Admin account.

    Microsoft Azure - Sign in

  2. Navigate to Enterprise Applications under Azure Active Directory.

    Enterprise Applications

  3. Select the Adobe Identity Management app where you’ve configured Auto provisioning.

    Adobe Identity Management

  4. Select Provisioning.

    Microsoft Azure Provisioning

  5. Navigate to Edit Attribute Mapping.

    Edit attribute mapping

  6. Under the Mapping section, select Provision Azure Active Directory Users.

    Provision Azure Active Directory users

  7. Then select Add New Mapping.

    Add new mapping

Apply Role mapping

To enable Adobe Express to provide a tailored experience for Educators and students we need to share role information from Azure AD to Adobe through the process of an attribute mapping.

A Direct Mapping of role from Azure AD to Adobe can only be used if you have an attribute that is Educator or Student for all users.

Expression mapping enables the use of a rule to generate the output of Educator or Student. In the following section we have provided examples with comments for common use cases in education.

Test Role sync

Role Ingestion can be tested by provisioning a user on-demand or waiting for changes to begin flowing between Azure AD and Adobe.

Test Role Ingestion via on-demand provisioning

On-demand provision a user in Azure AD

  1. Return to the Adobe Identity Management app.

    Adobe Identity Management

  2. Select Provision on demand.

  3. Select User and click Provision.

    Provision On Demand

  4. Review Results.

    Review results

Verify assignment

  1. Sign in to the Admin Console.

  2. In the Users tab, locate provisioned user.

  3. Confirm role assignment. 

    View User Details.

    User roles

Get help faster and easier

New user?

ICYMI Promo

Updates and Releases!

In case you missed it follow this page to stay updated!

Updates and Releases!

In case you missed it follow this page to stay updated!

ICYMI Promo

Updates and Releases!

In case you missed it follow this page to stay updated!

Updates and Releases!

In case you missed it follow this page to stay updated!