-
Setup and onboarding
- Explore Adobe Admin Console
- Sign-in and access
-
Licensing
- Licensing overview
- Licensing types
-
Identity and SSO
- Set up identity
- Integrate with Microsoft Entra
- Integrate with Google Sync
- Integrate with other SSO providers
- Troubleshoot
-
Directories, domains, and access
-
Directories and domains
- Create a directory for SAML identity providers
- Verify domain ownership
- Set up domains for directory authentication
- Move domains across directories
- Encrypted and trusted directory domain transfers
- Move directories between Admin Consoles
- Delete directories and domains
- Automatic account creation overview
- Enable automatic account creation
- Automatic federated account creation FAQ
- Domain enforcement
- Directory trusting
-
Directories and domains
-
Settings
- Asset settings
- Manage encryption
-
User management
- Understand user management
- Manage users and groups
- Manage admins
- Manage user roles
- Migrate users
-
Products and entitlements
- Manage products
- Manage product profiles
- Special programs plans
- Manage entitlements
- Manage automatic assignment
- Manage product access
- Manage self-service policies
- Manage app integrations
- Frame.io integration
- Manage product permissions
- Manage storage and assets
-
Manage services
- Configure services
- Adobe Stock
- Custom fonts
- Adobe Asset Link
-
Deploy apps and updates
- Prepare for deployment
- Manage pre-generated packages
- Create packages
- Customize end-user experience
- Deploy packages
- Use third-party deployment tools
-
Manage Shared Device Licensing (SDL)
- Shared Device Licensing overview
- Deploy Shared Device Licensing
- Manage SDL profiles and user access
- Activate shared device licenses
- Use the Shared Device Licensing toolkit
- Recover shared device licenses
- Shared Device Licensing identity FAQ
- Shared Device Licensing deployment FAQ
- Shared Device Licensing access FAQ
- Known issues in Shared Device Licensing
- Adobe Update Server Setup Tool (AUSST)
- Adobe Remote Update Manager (RUM)
- Troubleshoot
- Contracts and renewals
- Reports and logs
-
Get started with Global Admin Console
- Get started
- Manage your organization
- Reports audit
-
Get help
- Support options
-
General troubleshooting
- Microsoft Purview Information Protection support in Acrobat
- Use the Creative Cloud Cleaner tool to fix installation issues
- Fix app launch errors on Shared Device Licensing machines
- Technical support boundaries for virtualized or server-based environments
- Resolve trial and license expired errors
- Migrating to OAuth Server-to-Server Credentials
- Manage device authentication for Creative Cloud and Acrobat Pro
User Sync Tool overview
Learn what the User Sync Tool does, when to use it, and where to find the setup, configuration, and command reference.
The User Sync Tool is a command-line tool that moves user and group information from your organization's enterprise directory system, such as Active Directory or another LDAP system, to your organization's directory in the Adobe Admin Console. You install it on a server you manage and run it on a schedule to keep Adobe user and group membership in sync with your directory.
When to use the User Sync Tool
The User Sync Tool automates user management for Federated ID and Enterprise ID users by syncing from your enterprise directory. It is one of several directory-based options. If your organization uses Microsoft Azure or Google federation, you can use a connector instead:
To manage users without a directory sync, you can also add users individually or in bulk.
Before you begin
In the Adobe Admin Console
- Create your directories.
- Create the product profiles and user groups that you plan to map to.
Server
Install the tool on a server that:
- Has internet access and can reach your directory service, such as LDAP or AD.
- Is protected and secure, because it stores or accesses your administrative credentials.
- Stays available and reliable, with backup and recovery.
- Can send email, so the tool can send reports to administrators.
- Uses a 64-bit processor when running Windows.
API credentials
Create credentials for the User Management API in the Adobe Developer Console. The tool authenticates with OAuth Server-to-Server, which requires a client ID and a client secret.
JWT (Service Account) authentication is deprecated and will be removed in a future version of the tool. Use OAuth Server-to-Server.
Set up, configure, and run the tool
The User Sync Tool project maintains the full instructions for installing, configuring, and running the tool. Use these resources:
For the API that the tool uses, see the User Management API documentation.
