User Guide Cancel

Education Deployment Setup with Roster Sync

Note:

Roster Sync is currently available for K-12 in the US

This page will guide you through setting up the Adobe Admin console with Rostering Users and licenses. 

Automated setup using Roster Sync (K-12)

Adobe supports syncing users from Roster data provided by Clever or Classlink; the roster sync is configured in the directory sync option.

Other Education Setup Guides

Roster Sync Setup Steps

  1. Create a directory 
  2. Configure a Federated Directory
  3. Claim Domain/s
  4. Configure Roster Application
  5. Configure Directory Sync with Roster Solution 

Setting up a new Federated Directory for Roster Sync

  1. Create a Directory

    Adobe Admin Console > Settings > Create Directory

    Enter a name for the directory, an internal name, not shared publicly and select Federated Directory.

    A screenshot of the Create Directory wizard with a text box for the name of the directory and two cards one for Federated ID and the other for Enterprise ID. The Federated ID card is selected.

  2. Configure a Federated Directory

    Follow Azure/Entra, Google, or SAML steps to configure the federated directory with your identity provider.

    • Google Federated Directory Setup
    • Microsoft Azure Federated Directory Setup
    • SAML Federated Directory Setup
    A screenshot of the create federated directory wizard displaying the options for Azure, Google and Other SAML

    On the confirmation screen, turn off auto account creation. In this setup, users are created and managed via sync.

    A screen showing add identity provider with Edu Portal and LMS SSO highlighted

  3. Claim Domain/s

    Once the directory screen is completed, claim domains using a Microsoft Global Admin Account or a Google Super Admin; this will list all available Domain/s in your identity provider console. If your organization is not using Azure/Entra or Google, you can validate domain ownership by creating a DNS text record with your domain registrar.

    A screenshot of an admin claiming domains in the adobe admin console

  4. Configure Roster application

    Clever

    In Clever, request Adobe Express and, if needed, Adobe Creative Cloud

    You will receive a link to book a call with an Adobe rep.
    The Adobe rep will confirm your settings, and you will then need to configure your sharing rules for the apps.

    Classlink

    In Classlink install Adobe Express and, if needed Adobe Creative Cloud in the Roster server. 
    There is no approval required to access these apps. 

    Once you have installed the App in Clever or Classlink, configure your sharing rules in your roster tool. If you enable a sync without any users configured the following step will fail.

    For full details of setting up Roster sync visit our Roster Sync detailed guide.

  5. Configure Directory Sync with Roster

    Configure Directory Sync with Roster

    Adobe Admin Console > Settings > Directory > Sync > Add sync

    Select your Roster provider and follow the guided steps. The roster sync will automatically assign users a [Roster] product profile and create federated accounts.

    Note:

    To control Generative Ai in K-12, edit the product profile for roster sync.
    Adobe Admin Console > Products > Selected product > [Roster Profile] > Details

    Generative Ai is controlled by the Firefly toggle (K-12)

  6. Enable SSO from Roster Portal

    To support SSO from your portal, add a secondary idp for your provider.

    Adobe Admin Console > Settings > Directory > Authentication > Add new ipd > Education Portal SSO >  Select Clever or Classlink and accept the default options.

    This will enable users to click on the app tile in your portal to log in. 

    A screen showing add identity provider with Edu Portal and LMS SSO highlighted


Post K-12 Rotering Setup

After Completing the setup, additional options

Share the Quick Login URL with your users.

The URL presented at the final stage of the process will take a user who clicks on the link directly to Google or Microsoft to authenticate. Once authenticated, they will be taken directly into Adobe Express for K-12.

Suggested locations for this URL

  • Managed Bookmarks
  • District Launchpads
  • Email

Google Workspace Admin Only

A computer screen shot of a colorful backgroundDescription automatically generated

Pin Adobe Express SSO Launch URL to the taskbar of a Chromebook

In the Google Admin Console > Apps & Extensions https://admin.google.com/ac/chrome/apps/user add the following as a URL:

https://new.express.adobe.com/chrome-tab/a/domain.org

Replace domain.org with a domain claimed in your Admin Console federated directory.

To pin the icon to the taskbar, select Force install + Pin to ChromeOS taskbar.

Get help faster and easier

New user?

ICYMI Promo

Updates and Releases!

In case you missed it follow this page to stay updated!

Updates and Releases!

In case you missed it follow this page to stay updated!

ICYMI Promo

Updates and Releases!

In case you missed it follow this page to stay updated!

Updates and Releases!

In case you missed it follow this page to stay updated!