User Guide Cancel

Create a directory for SAML-based identity providers

Last updated on 27 Des 2022 | Also applies to Creative Cloud for enterprise, Document Cloud for enterprise

Adobe Enterprise & Teams: Panduan administrasi
Rencanakan penerapan Anda
1. Konsep dasar
2. Panduan Penerapan
3. Terapkan Creative Cloud for Education
Atur organisasi Anda
1. Tipe identitas | Ringkasan
2. Atur identitas | Ringkasan
3. Atur organisasi dengan Enterprise ID
4. Atur federasi dan sinkronisasi Azure AD
5. Atur Google Federation dan sinkronkan
6. Atur organisasi dengan Microsoft ADFS
7. Mengatur organisasi untuk Portal Distrik dan LMS
8. Atur organisasi dengan Penyedia Identitas lainnya
9. Pertanyaan umum dan pemecahan masalah SSO
Kelola pengaturan organisasi Anda
Mengelola pengguna
Mengelola produk dan hak
1. Mengelola produk dan profil produk
2. Mengelola lisensi Perangkat Bersama
Mulai menggunakan Global Admin Console
Kelola penyimpanan dan aset
1. Penyimpanan
2. Migrasi aset
3. Klaim kembali aset dari pengguna
4. Migrasi aset siswa | hanya untuk EDU
  1. Migrasi aset siswa otomatis
  2. Migrasikan aset Anda
Kelola layanan
1. Adobe Stock
2. Font khusus
3. Adobe Asset Link
4. Adobe Acrobat Sign
5. Creative Cloud untuk perusahaan - keanggotaan gratis
  1. Ikhtisar
Terapkan aplikasi dan pembaruan
1. Ikhtisar
2. Buat paket
3. Sesuaikan paket
  1. Sesuaikan Aplikasi desktop Creative Cloud
  2. Sertakan ekstensi dalam paket Anda
4. Terapkan Paket
5. Kelola pembaruan
  1. Ubah manajemen untuk pelanggan perusahaan dan tim Adobe
  2. Terapkan pembaruan
6. Adobe Update Server Setup Tool (AUSST)
7. Adobe Remote Update Manager (RUM)
  1. Gunakan Adobe Remote Update Manager
  2. Atasi kesalahan RUM
8. Memecahkan masalah
Kelola akun Teams Anda
Perpanjangan
1. Keanggotaan Teams: Perpanjangan
2. Perusahaan di VIP: Perpanjangan dan kepatuhan
Kelola kontrak
Laporan & log
Dapatkan bantuan

Creating a directory in the Admin Console is your first step in setting up your user and license management. A directory holds resources such as users, domains, and authentication policies. These directories are similar to LDAP or Active Directories.

If you're setting up your Admin Console users' identity management for the first time, we recommend you use Microsoft Azure AD or Google as your federated identity providers.

This document targets all SAML-based identity providers (IdPs), such as Microsoft AD FS. Use the procedure if your organization is using one or more of the following:

A SAML provider other than Azure AD or Google
Microsoft Azure AD or Google federation via SCIM

Note:

Adobe currently does not support IdP-initiated workflows.

Create a directory

Sign in to the Admin Console, navigate to Settings > Identity > Directories. Then, select Create Directory.
Enter a name for your directory, select Federated ID, and select Next.
Choose Other SAML Providers and select Next.
Use the Set up IdP screen to get the setup information for your identity provider.

Some Identity Providers (IdP) accept a metadata file that you can upload, while others may require the ACS URL and the Entity ID. For example, for SalesForce, download the metadata file, extract the certificate information from the file and use that certificate information in SalesForce IdP software.

Choose one of the methods given below options.
Method 1:

Click Download Adobe Metadata file.

The metadata file is downloaded to your local disk. Use this file to configure your SAML integration with the Identity Provider.

Method 2:

Copy the ACS URL and the Entity ID.
Switch to your IdP application window and either upload the metadata file or specify the ACS URL and Entity ID. Once done, download the IdP metadata file
Return to the Adobe Admin Console and upload the IdP metadata file to the Set up IdP screen and select Next.
Set up auto-account creation.

Automatic account creation is enabled by default. It allows users without a federated account to automatically create one with their organization based on a verified email domain. When enabled for a federated directory, new users with a valid email domain in that directory will be able to create a federated account.

If you disable automatic account creation, new users in your organization who have valid accounts with domains of this identity provider will no longer be able to create a federated account automatically.
Select a default country from the dropdown menu in the Attribute mappings section. Learn more about attribute mappings.
You can also choose to update user information in Admin Console when users log in. Then, select Done.