User Guide Cancel

Edit user identity type

Last updated on Feb 15, 2022 10:54:05 AM GMT | Also Applies to Creative Cloud for enterprise, Document Cloud for enterprise, Experience Cloud

Adobe Enterprise & Teams: Administration guide
Plan your deployment
1. Basic concepts
2. Deployment Guides
3. Deploy Creative Cloud for education
Set up your organization
1. Set up identity
  1. Identity types | overview
  2. Set up organization with Enterprise ID
  3. Set up organization with Federated ID
    1. SSO overview
    2. Setup Azure Connector and sync
    3. Set up Google Federation and sync
    4. Generic SAML
    5. Education SSO
      1. Configure SSO for District Portals and LMS
      2. Common questions
  4. Verify ownership of a domain
  5. Add and manage domains
  6. Link domains to directories
  7. Manage existing domains and directories
  8. Use directory trust to add pre-claimed domains
  9. Migrate to new authentication provider
2. Asset settings
3. Authentication settings
4. Privacy and security contacts
5. Console settings
6. Manage encryption
Manage products and entitlements
1. Manage users
2. Manage products and product profiles
3. Manage Shared Device licenses
Manage storage and assets
1. Storage
2. Asset migration
3. Reclaim assets from a user
4. Student asset migration | EDU only
  1. Automatic student asset migration
  2. Migrate your assets
Manage services
1. Adobe Stock
2. Custom fonts
3. Adobe Asset Link
4. Adobe Acrobat Sign
5. Creative Cloud for enterprise - free membership
  1. Overview
  2. Getting started
Deploy apps and updates
1. Overview
2. Create packages
3. Customize packages
  1. Customize the Creative Cloud desktop app
  2. Include extensions in your package
4. Deploy Packages
5. Manage updates
  1. Change management for Adobe enterprise and teams customers
  2. Deploy updates
6. Adobe Update Server Setup Tool (AUSST)
7. Adobe Remote Update Manager (RUM)
8. Troubleshoot
9. Create packages using Creative Cloud Packager (CC 2018 or earlier apps)
Manage your account
Reports & logs
Get help

If you are already using an identity type and need to edit your identity model, you can change your end-user's identity type as a System Administrator.

Caution:

The procedures described in this document do not apply to Experience Cloud customers. If you're an Experience Cloud customer, contact Adobe Customer Care.

Introduction

Edit the identity types of existing users on the Adobe Admin Console:

Enterprise ID to Federated ID,
Federated ID to Enterprise ID,
Adobe ID to Enterprise ID, or
Adobe ID to Federated ID.

Change Adobe ID users to Federated ID users | YouTube video

Note:

You need a new or an existing directory to change the identity type of a user from Enterprise ID to Federated ID or vice versa. For more details, see move domains across directories.

Caution:

Edit identity type is currently not supported for the Business IDs.

Migrating users | Overview

The following matrix provides an overview of the identity type migration workflows:

	Adobe ID to Enterprise ID	Adobe ID to Federated ID	Adobe ID to Federated ID (Azure & Google Sync)	Enterprise ID to Federated ID
How to...	In the Admin Console, navigate to Users and choose Edit Identity Type.		First, set up connector to have users created. Use Edit Identity Type workflow. Note: For migration, users must already exist in Admin Console.	Change the directory that the domain is linked to. Users are automatically migrated.
What happens to user assets	Assets are auto migrated	Users with Creative Cloud entitlements: Assets are auto migrated. Users with Document Cloud or other non-Creative Cloud entitlements: Assets are not auto migrated. Manual migration is required.		Assets are auto migrated.
What happens to user assets	Assets of users in different regions are not auto migrated. Manual migration is required. For details on regions, see Regions and Availability Zones.
	Notes: Identity setup is required before migration. Migration unavailable for users with both Creative Cloud and Marketing Cloud on the same console.	Note: To avoid login issues, ensure all user information uploaded via CSV matches the information in your directory.		Note: We recommend that you don't migrate users in encrypted directories or organizations..

Impact on Creative Cloud end users

If you edit the identity type of users from Adobe ID to Federated/Enterprise ID, these users continue to have access to their personally owned Adobe ID. However, they access the organization’s Adobe apps, services, and solutions through the new Federated ID or Enterprise ID assigned to them.

If your users already have Adobe IDs with assets linked to it, they can migrate assets from their Adobe ID accounts to their new enterprise account.

Edit identity types

Applies to Creative Cloud for enterprise and Document Cloud for enterprise.

The following procedure enables you to edit the identity type for users:

Note:

You can also edit user details such as email addresses and names for users using the Admin Console, User Sync tool, or the User Management API.
Ensure that you allow Azure Sync to synchronize the users before uploading the CSV to do the identity type switch.

Click , and select Edit Identity Type by CSV from the drop-down list.

The Edit Identity Type by CSV dialog box displays.

To include users to edit Identity type, download the Current User List or the CSV Standard Template, clicking Download CSV Template.

The .csv file downloaded, contains the following data.

Field Name	Description
Identity Type	The identity type currently assigned to the user.
Username	Username as it corresponds to the respective user ID.
Domain	Domain as it corresponds to the Enterprise or Federated ID.
New Identity Type	Enter the identity type that you want to change to. This value controls the ID type assigned to the user. Not case sensitive. The ID type must be valid for the domain. Valid values: Federated ID Enterprise ID Adobe ID

New Email	Valid email address. 60 character maximum. A name and domain. If the identity type is Enterprise ID or Federated ID, the domain must be claimed and activated by the organization. The username determines the account name. For other account types, it is the email address used for the user and account name. See RFC 2822 sec 3.4.1
New Username	Restricted to ASCII. Username as it corresponds to the respective user ID. For Adobe ID type users, the username that is defined for the Adobe ID of the user. Maximum length is 255 characters.
New Country Code	A two-letter country code (for example, United States = "US"). If present, check to ensure that the user is from a country where Adobe does the business. It is present for Enterprise administered accounts. To determine the Country Code, see https://www.iso.org/obp/ui/#home. For more information, see ISO 3166-1 alpha-2 Country Codes.

Open the .csv file in an application (such as Microsoft Excel) capable of editing CSVs and edit the identity types, as required.

Note:

When you are editing the identity type from Adobe ID to Federated/Enterprise ID, the email address for Adobe ID or must match the one for the enterprise account.

Adobe ID email	Federated ID or Enterprise ID email	Edit identity type
janedoe@xyz.com	janedoe@xyz.com	Success
johndoe@adobe.com	johndoe.@xyz.com	Fail

Open the Edit Identity Type by CSV dialog box and upload the updated .csv file. Ensure that this file is saved with UTF-8 encoding.

Once the process is complete, you receive a notification email.

This process migrates the permissions and provisioned products for all migrated users. The users whose identity has changed, receive a notification to use their new Enterprise, or Federated ID account when working with the Adobe products they have been provisioned.

In addition, if your users were previously using Adobe IDs and have assets linked to it, these users will be requested to consent to the Asset Migration process. The Asset Migration process automatically moves the users' assets from their Adobe ID account to their Enterprise account.

Asset migration

When you edit the identity type of the users from Adobe ID to Federated ID/Enterprise ID, users can migrate the supported content from their existing company assigned Adobe ID account to their new enterprise account. The migration can be done in two ways:

For users to automatically migrate their content, they must be assigned access to storage/services for both, Creative Cloud and Document Cloud. For users to have access to storage for Creative Cloud and Document Cloud, do one of the following:

Assign a Product Profile which offers the Creative Cloud All Apps plan with storage, and has the PDF Services turned On.
Assign a Creative Cloud Product Profile with storage, and a Document Cloud Product Profile with storage (excludes desktop only offers) and PDF Services turned On.

Note:

All product licenses that the user is assigned to, must have storage included. Otherwise, Asset Migration fails. For example, an Adobe ID user allocated to a single app license for Photoshop with no storage and another single app license for XD with 100-GB storage cannot migrate the assets automatically.

After the Edit Identity Type process is complete, the end-user receives an email notification with the details to migrate their assets.

As the IT Admin, you can download the Asset Migration completion status report for all the users that were part of the Edit Identity process. To download the report, do the following:

Navigate to Admin Console > Users.

Click and select Export migration report to CSV from the drop-down list.

The report is downloaded.

This report tells you who has granted consent, who has denied consent, and who hasn’t taken any action yet. To know about the type of content that the migration process supports, see Asset Migration FAQ.

Note:

Sometimes, the automatic Asset Migration process cannot be triggered for a few users. These users receive a notification to transfer their content manually, and are excluded from the migration report.