Adobe Admin Console > Settings > Create Directory
Enter a Directory Name (internal) and select Federated ID
Select Azure
Sign in with an Azure Global Admin account to accept the Adobe Identity Management App
The federated directory will be created
Add domains from Azure, Google or via a DNS record

Setup Azure SSO Guide

Google SSO

Adobe Admin Console > Settings > Create Directory
Enter a Directory Name (internal) and select Federated ID
Select Google
Launch the Google Admin console > Apps > Web and Mobile Apps
Add App > Search for Adobe (SAML)
Download the Metadata from Google
Copy the ACRS URL and End Point URL from the Adobe Console Screen to Google
Continue with all of the default settings.
Upload the Google Metadata XML file to Adobe and complete the configuration.
Ensure you set the Adobe app for all OU’s that require access.
Add domains from Azure, Google or via a DNS record

Setup Google SSO Guide

Sync Providers

Azure Sync

Adobe Admin Console > Settings > Directory > Sync > Add Sync
Select Azure
In Azure Portal > Enterprise Applications > Adobe Identity Management, this app was added if you configured Azure SSO.
Select Provisioning > Get Started
Copy the endpoint URL and the Secret token from the Adobe Admin Console.
Paste the values into the provisioning wizard in Azure.
Test the connection
In the Adobe Identity Management App > Select Users and Groups
Add your Azure groups to the app. This will then sync the groups to Adobe
Complete the confirmation step on the Adobe Admin Console and wait up to 20 minutes for synced Users and Groups to appear in the Adobe Admin Console.
For troubleshooting the sync visit Entra > Enterprise Applications > Adobe Identity Management > Provisioning > Provisioning Log

Setup Azure Sync Guide

Google Sync

Adobe Admin Console > Settings > Directory > Sync > Add Sync
Select Google
In the Google Admin Console > Web and Mobile Apps > Adobe (SAML)
Select Configure Auto-Provisioning
Copy the endpoint URL and Secret token from Adobe Admin Console
Paste the values into the wizard in the Google Admin Console
During the attribute mapping step, set the field attribute
urn:ietf:params:scim:schemas:extension:Adobe:2.0:User.organizationalUnit to map to Organization unit path
Complete the wizard on the Google Admin Console and enable user provisioning
Turn On auto-provisioning
Complete the confirmation step on the Adobe Admin Console and wait up to 20 minutes for synced User and Groups to appear in the Adobe Admin Console.
To troubleshoot the sync, go to the Google Admin Console > Web and Mobile Apps > Adobe SAML and view the details in the user provisioning section.

Setup Google Sync Guide

Secondary Identity Providers SSO

Clever SSO (Secondary IDP) (K-12)

In the Clever district portal, add the Adobe Express SSO Only app https://www.clever.com/app-gallery/adobe-cc-sso.
Configure the sharing rules in Clever for these apps.
To enable authentication with Clever Adobe Admin Console > Settings > Directory > Authentication > Add New IDP > Education Portal and LMS SSO > Clever
Select Clever
Test a login via Clever

Classlink SSO (Secondary IDP) (K-12)

In the Classlink portal, add Adobe Express and publish the app.
To enable authentication with Classlink, visit the Adobe Admin Console > Settings > Directory > Authentication > Add New IDP > Education Portal and LMS SSO >
Select Classlink
Keep the default options
Test a login via Classlink

Schoology SSO (Secondary IDP) (K-12)

While logged in as a Schoology Administrator, follow these steps to enable the Adobe Express App
Navigate to the App Center.
Find the Adobe Express App and click the icon.
Click Install LTI 1.1 App, agree to the terms, then Add to Organization.
Click Configure for the Adobe Express record on the Organization Apps page.
Select Save Settings.
Use the Install/Remove tool to enable the app for users according to your implementation plan
In the Adobe Admin Console > Settings > Directory > Add New IDP > Education Portal and LMS SSO >
Select Powerschool
Test a login via Schoology
Add the Adobe Express app to Schoology https://app.schoology.com/apps/profile/6745964684

Roster Sync (K-12 US)

Roster syncing is available for Clever and Classlink districts.
Approve the App in Clever or Classlink
Configure the directory sync to link to your roster service in the Adobe Admin Console

Roster sync detailed guide

Custom Fonts

The custom fonts product offer enables IT Admins to share OTF or TTF fonts with their users. However, the admin must ensure they have the correct font license.

The first step in creating a custom font profile is to add a Product Admin to the custom font product.