Navodila za uporabo Prekliči

Add Google sync to your federated directory

  1. Adobe za podjetja in skupine: vodnik za skrbništvo
  2. Načrtovanje uvedbe
    1. Osnovni pojmi
      1. Licenciranje
      2. Identiteta
      3. Upravljanje uporabnikov
      4. Uvedba programov
      5. Pregled konzole Admin Console
      6. Skrbniške vloge
    2. Vodniki za uvedbo
      1. Vodnik za uvedbo imenovanih uporabnikov
      2. Vodnik za uvedbo licenciranja naprave v skupni rabi
      3. Uvedba programa Adobe Acrobat 
    3. Uvedba storitve Creative Cloud za izobraževalne ustanove
      1. Začetna stran za uvajanje
      2. Čarovnik za uvajanja za osnovno- in srednješolsko izobraževanje
      3. Preprosta nastavitev
      4. Sinhronizacija uporabnikov
      5. Roster Sync K-12 (ZDA)
      6. Najpomembnejši pojmi glede licenciranja
      7. Možnosti uvajanja
      8. Hitri nasveti
      9. Odobritev programov Adobe v storitvi Admin Console v Googlu
      10. Omogočanje programa Adobe Express v Učilnici Google
      11. Integracija s storitvijo Canvas LMS
      12. Integracija s storitvijo Blackboard Learn
      13. Konfiguriranje enkratne prijave za okrožne portale in storitve LMS
      14. Dodajanje uporabnikov s storitvijo Roster Sync
      15. Pogosta vprašanja o storitvi Kivuto
      16. Smernice za upravičenost glavnih in pomožnih ustanov
  3. Nastavitev organizacije
    1. Vrste identitet | Pregled
    2. Nastavitev identitete | Pregled
    3. Nastavitev organizacije z Enterprise ID-jem
    4. Nastavitev združevanja in sinhronizacije storitve Azure AD
      1. Nastavitev enkratne prijave z Microsoftom prek storitve Azure OIDC
      2. Dodajanje storitve Azure Sync v imenik
      3. Sinhronizacija vlog za izobraževanje
      4. Pogosta vprašanja o storitvi Azure Connector
    5. Nastavitev združevanja in sinhronizacije Google
      1. Nastavitev enkratne prijave z združevanjem Google
      2. Dodajanje sinhronizacije Google v imenik
      3. Pogosta vprašanja o združevanju Google
    6. Nastavitev organizacije s storitvijo Microsoft ADFS
    7. Nastavitev organizacije za okrožne portale in LMS
    8. Nastavitev organizacije z drugimi ponudniki identitet
      1. Ustvarjanje imenika
      2. Preverjanje lastništva domene
      3. Dodajanje domen v imenike
    9. Pogosta vprašanja o enkratni prijavi in odpravljanju težav
      1. Pogosta vprašanja o enkratni prijavi
      2. Odpravljanje težav pri enkratni prijavi
      3. Pogosta vprašanja o izobraževanju
  4. Upravljanje nastavitve organizacije
    1. Upravljanje obstoječih domen in imenikov
    2. Omogočanje samodejnega ustvarjanja računa
    3. Nastavitev organizacije prek zaupanja imenika
    4. Selitev na novega ponudnika preverjanja pristnosti 
    5. Nastavitve sredstev
    6. Nastavitve preverjanja pristnosti
    7. Stiki za zasebnost in varnost
    8. Nastavitve konzole
    9. Upravljanje šifriranja  
  5. Upravljanje uporabnikov
    1. Pregled
    2. Skrbniške vloge
    3. Strategije upravljanja uporabnikov
      1. Upravljanje posameznih uporabnikov   
      2. Upravljanje več uporabnikov (skupinska datoteka CSV)
      3. Orodje za sinhronizacijo uporabnikov
      4. Sinhronizacija Microsoft Azure
      5. Sinhronizacija združevanja Google
    4. Dodelitev licenc uporabniku računa za skupine
    5. Dodajanje uporabnikov z ustreznimi e-poštnimi domenami
    6. Sprememba vrste identitete uporabnika
    7. Upravljanje uporabniških skupin
    8. Upravljanje uporabnikov imenika
    9. Upravljanje razvijalcev
    10. Selitev obstoječih uporabnikov v storitev Adobe Admin Console
    11. Selitev upravljanja uporabnikov v storitev Adobe Admin Console
  6. Upravljanje izdelkov in pravic
    1. Upravljanje izdelkov in profilov izdelkov
      1. Upravljanje izdelkov
      2. Nakup izdelkov in licenc
      3. Upravljanje profilov izdelkov za poslovne uporabnike
      4. Upravljanje pravil samodejnega dodeljevanja
      5. Omogočite uporabnikom učenje modelov Firefly po meri
      6. Pregled zahtev za izdelke
      7. Upravljanje samopostrežnih pravilnikov
      8. Upravljanje integracij programov
      9. Upravljanje dovoljenj za izdelke v storitvi Admin Console  
      10. Omogočanje/onemogočanje storitev za profil izdelka
      11. En program | Creative Cloud za podjetja
      12. Izbirne storitve
    2. Upravljanje licenc za naprave v skupni rabi
      1. Novosti
      2. Vodnik za uvedbo
      3. Ustvarjanje paketov
      4. Obnovitev licenc
      5. Upravljanje profilov
      6. Komplet orodij za licenciranje
      7. Pogosta vprašanja o licenciranju naprav v skupni rabi
  7. Predstavitev konzole Global Admin Console
    1. Uvedba globalnega skrbništva
    2. Izbira organizacije
    3. Upravljanje hierarhije organizacije
    4. Upravljanje profilov izdelkov
    5. Upravljanje skrbnikov
    6. Upravljanje skupin uporabnikov
    7. Posodobitev pravilnikov organizacije
    8. Upravljanje predlog pravilnikov
    9. Dodelitev izdelkov podrejenim organizacijam
    10. Izvajanje čakajočih opravil
    11. Raziskovanje vpogledov
    12. Izvoz ali uvoz strukture organizacije
  8. Upravljanje prostora za shranjevanje in sredstev
    1. Prostor za shranjevanje
      1. Upravljanje shrambe podjetja
      2. Adobe Creative Cloud: Posodobitev na shrambo
      3. Upravljanje prostora za shranjevanje Adobe
    2. Selitev sredstev
      1. Avtomatizirana selitev sredstev
      2. Pogosta vprašanja o avtomatizirani selitvi sredstev  
      3. Upravljanje prenesenih sredstev
    3. Povrnitev sredstev od uporabnika
    4. Selitev sredstev študentov | Samo za izobraževanje
      1. Samodejna selitev sredstev študentov
      2. Selitev lastnih sredstev
  9. Upravljanje storitev
    1. Adobe Stock
      1. Paket kreditnih točk Adobe Stock za skupine
      2. Adobe Stock za podjetja
      3. Uporaba storitve Adobe Stock za podjetja
      4. Odobritev licence za Adobe Stock
    2. Pisave po meri
    3. Adobe Asset Link
      1. Pregled
      2. Ustvarjanje uporabniške skupine
      3. Konfiguracija storitve Adobe Experience Manager Assets
      4. Konfiguracija in namestitev storitve Adobe Asset Link
      5. Upravljanje sredstev
      6. Adobe Asset Link za XD
    4. Adobe Acrobat Sign
      1. Nastavitev storitve Adobe Acrobat Sign za podjetja ali skupine
      2. Adobe Acrobat Sign – skrbnik funkcije skupine
      3. Upravljanje storitve Adobe Acrobat Sign v storitvi Admin Console
    5. Creative Cloud za podjetja – brezplačno članstvo
      1. Pregled
  10. Uvedba programov in posodobitev
    1. Pregled
      1. Uvedba in zagotavljanje programov in posodobitev
      2. Načrtovanje uvedbe
      3. Priprava na uvedbo
    2. Ustvarjanje paketov
      1. Ustvarjanje paketov programov v storitvi Admin Console
      2. Ustvarjanje licenčnih paketov imenovanih uporabnikov
      3. Predloge Adobe za pakete
      4. Upravljanje paketov
      5. Upravljanje licenc za naprave
      6. Licenciranje serijske številke
    3. Prilagoditev paketov
      1. Prilagoditev namiznega programa Creative Cloud
      2. Vključitev razširitev v paket
    4. Uvedba paketov 
      1. Uvedba paketov
      2. Uvedba paketov Adobe s storitvijo Microsoft Intune
      3. Uvedba paketov Adobe z upraviteljem SCCM
      4. Uvedba paketov Adobe s storitvijo ARD
      5. Namestitev izdelkov v mapo za izjeme
      6. Odstranitev izdelkov Creative Cloud
      7. Uporaba Adobejevega kompleta orodij za zagotavljanje (izdaja za podjetja)
      8. Identifikatorji licenciranja za Adobe Creative Cloud
    5. Upravljanje posodobitev
      1. Upravljanje sprememb za Adobejeve stranke podjetij in skupin
      2. Uvedba posodobitev
    6. Nastavitveno orodje strežnika za posodabljanje Adobe (AUSST)
      1. Pregled orodja AUSST
      2. Nastavitev notranjega strežnika za posodabljanje
      3. Vzdrževanje notranjega strežnika za posodabljanje
      4. Pogosti primeri uporabe orodja AUSST   
      5. Odpravljanje težav z notranjim strežnikom za posodabljanje
    7. Adobe Remote Update Manager (RUM)
      1. Uporaba programa Adobe Remote Update Manager
      2. Odpravljanje napak v programu RUM
    8. Odpravljanje težav
      1. Odpravljanje napak pri namestitvi in odstranjevanju programov Creative Cloud
      2. Poizvedba v odjemalskih računalnikih za preverjanje uvedbe paketa
      3. Sporočilo o napaki »Namestitev ni uspela« za paket Creative Cloud
  11. Upravljanje računa za skupine
    1. Pregled
    2. Posodobitev podatkov za plačilo
    3. Upravljanje izdanih računov
    4. Sprememba lastnika pogodbe
    5. Zamenjava paketa
    6. Zamenjava prodajalca
    7. Preklic paketa
    8. Skladnost zahteve za nakup
    9. Upravljanje skupine v programu Adobe Express
  12. Podaljšanje
    1. Članstvo za skupine: podaljšanje
    2. Podjetja v storitvi VIP: podaljšanje in skladnost
  13. Upravljanje pogodb
    1. Avtomatizirane faze izteka za pogodbe ETLA
    2. Zamenjava vrste pogodbe v obstoječi storitvi Adobe Admin Console
    3. Value Incentive Plan (VIP) na Kitajskem
    4. Pomoč za VIP Select
  14. Poročila in dnevniki
    1. Revizijski dnevnik
    2. Poročila o dodelitvi
    3. Dnevniki vsebine
  15. Pomoč
    1. Stik z Adobejevo službo za skrb za stranke
    2. Možnosti podpore za račune za skupine
    3. Možnosti podpore za račune za podjetja
    4. Možnosti podpore za rešitev Experience Cloud

Google Sync automates user management for your Admin Console directory. Add Google Sync to any existing federated directory in the Adobe Admin Console regardless of its identity provider (IdP). To use Google Sync, you must store your organization’s user data within the Google Admin Console.

Opomba:
  • You can sync your Google Organizational Units to the Adobe Admin Console as user groups. Then, assign Adobe products to the associated users.
  • If your identity provider is Google and you do not have a federated directory in the Adobe Admin Console, you can authenticate your users with Google federation using SAML. It combines directory creation, domain claim, and SSO configuration in a simple workflow involving steps in the Google Admin Console and the Adobe Admin Console.
  • If you have a working federated directory, you can add sync capability on top of your existing setup.

Overview

You can add Google Sync to any directory in the Adobe Admin Console to automate its user management process. Google Sync uses SCIM-protocol for user management and offers you control over user information shared with Adobe. Specified users in the Google Admin Console synchronized with the Adobe Admin Console can be assigned to one or more product profiles.

After you've set up Google Sync, Google starts to send data to the Adobe Admin Console as per the Google Admin Console directory's user provisioning configuration. You can see the directory's details in the Settings section of the Adobe Admin Console.

Benefits of Google Sync

The key advantages of the Google Sync with your directory in the Adobe Admin Console are:

 Manage user provisioning via the Google Admin Console

 Control what data is sent to Adobe

 Assign products to multiple users based on Google Organizational Units 

 Add sync to previously configured directories

 Add Google sync to other IdP directories

 Onboard and offboard users easily using Google Admin Console

 No need for another service or API setup

Prerequisites

To integrate Adobe Admin Console user management with Google Admin Console, you need the following:

  • A Google Admin Console account with admin access to user data
  • A federated directory in the Adobe Admin Console with verified domains

Supported integration scenarios

Directory setup scenario

Method to add sync

Single Google Admin Console tenant to a single Adobe Admin Console

Follow Add Sync steps to establish Google Sync. 

Multiple federated directories with one or more domains that belong to the same Google Admin Console tenant. 

  1. Consolidate domains into a single federated directory. 
  2. Follow Add Sync steps to establish Google Sync. 

Multiple federated directories with one or more domains that belong to different Google Admin Console tenants.  

  1. Follow Add Sync steps to establish Google Sync for a single directory.
  2. Repeat Google Sync setup for all separate directories that require sync.

Notes before sync configuration

Follow the points below to see the best practices and Adobe Recommendations before you set up Google Sync:

  • Export the list of existing users before adding Google Sync to keep a record of all user accounts and provisioned licenses when you set up.
  • If you integrate Google Sync to a directory having Federated ID users, verify that their username in Adobe Admin Console matches the username in user provisioning mappings in Google Admin Console. If these values do not match, Adobe Admin Console perceives this as a new user account and creates duplicate records for a single user. You can update the attribute mapping to ensure that the values passed by sync match the values in the user profiles in the Adobe Admin Console, which will automatically update the accounts upon the next sync.
  • Your admin console must have at least one federated directory for you to be able to establish Google Sync. If the Adobe Admin Console with Google Sync (owning Console) is in a trust relationship with another Adobe Admin Consoles (trustee Consoles), the trustees must use another form of user management, such as User Sync Tool, User Management API, or bulk CSV upload to manage Federated ID users.
  • To add users to a trustee Console for license provisioning, you must add the user to the owning Console.
  • If your organization uses the User Sync Tool or a UMAPI integration, you must pause the integration. Then, add Google Sync to automate user management from Google Admin Console. Once Google Sync is configured and running, remove the User Sync Tool or UMAPI integration.
  • To move a domain to or from a directory established with Google Sync, you must remove Google Sync from the chosen directory. Then, move the desired domain to or from the chosen directory and reestablish sync to the target directory.

Add Google Sync to a federated directory

Follow the steps below to sync users from the Google Admin Console:

  1. In the Adobe Admin Console, navigate to Settings > Directory Details > Sync. Click Add Sync.

  2. Select Sync users from Google Workspace and click Next.

  3. Select Go to Google Admin Console and log in with an administrator account. Then, follow the steps on the instruction page in the Adobe Admin Console to configure automatic user provisioning.

  4. Once all steps are completed and confirmed, click Save in the Adobe Admin Console.

  5. Navigate to Directory Details > Sync, where the sync source will be displayed.

Sync Google Organizational Units

You can sync Google Organizational units (OUs) to your Google sync-enabled directory in the Admin Console. Each OU (including the root OU) in the Google Admin console is synced as a separate group along with the associated users.

For example, you've three users in the Google Admin console (User A, User B, and User C) in separate OUs. The following table shows how these users will be added to corresponding groups in the Adobe Admin Console (User B and User C are added to more than groups):

User

Google Admin Console OU

Adobe Admin Console user group

User A

Root Organizational Unit

OU-/

User B

"/Sales"

1. OU-/

2. OU-/Sales

User C

"/Sales/Germany"

1. OU-/

2. OU-/Sales

3. OU-/Sales/Germany

You must set up your Google OUs based on your licensing requirements before syncing them to the Adobe Admin Console.

Then, sign in to your Google Admin console and go to Apps > Web and mobile apps > select Adobe SAML app > go to Autoprovisioning > select Edit Attribute mapping.

In the Attributes window, select the Organizational unit path from the dropdown against the app attribute urn:ietf:params:scim:schemas:extension:Adobe:2.0:User.organizationalUnit.

Map attributes

Edit Sync settings

A System Administrator can update settings for the Sync Source once the setup is complete by choosing Go to Settings from the Directory settings > Sync tab. Setting options include:

  • Allow editing synced data in Admin Console: Once Google Sync is established, all the users in a directory automatically go under sync management. After you enable editing, you can edit synced data in the Admin Console for a brief period. Any edits during this time do not affect user information in the Google Admin Console but are overwritten by change requests from your identity provider.

    Pozor:

    By default, you must edit synced data from the identity provider and allow the changes to propagate through sync. We do not recommend you to change data in Adobe Admin Console unless necessary manually.

  • Sync status: Instructs Google Sync to reject change requests from the Google Admin Console. Once the User Sync Status is Off, changes in the Google Admin Console(user information source) are not pushed to the Adobe Admin Console. 

  • Edit user sync configuration: Redirects you to the configuration instructions to edit user sync. Use this if the modal is closed before completing the sync setup or if you must change things in the Google Admin Console after the initial configuration.

Remove sync

Administrators can choose to remove sync from a federated directory within the Admin Console. Removing sync leaves the directory and its associated domains, user groups, and users intact and removes read-only mode from the directory and its users and groups.

To remove sync from a directory, choose Go to Settings from the Directory settingsSync tab, then Remove Sync. Please also turn off autoprovisioning for the Adobe SAML app from Google Admin Console to prevent being quarantined. This action will permanently remove the sync setup from the Adobe Admin Console. If needed, you can reestablish sync with the same or different directory.

Opomba:

You cannot move domains to or from a directory managed by Google Sync. Once Google Sync is removed from the source and/or target directory, a domain from that directory can be moved to another target directory, and domains from other source directories can be moved into the directory that is no longer managed by Google Sync. 

Disable users

Implementing Google Sync creates new federated user accounts and syncs users to the Adobe Admin Console. Administrators can also deprovision users added through Google Sync via the below three methods (in the Google Admin Console):

  • Delete or suspend the users from Google Workspace.
  • Remove all groups associated with the users from Provisioning Scope.
  • Turn off the Adobe SAML app for the associated organizational Units in Google Workspace.

These three operations disable users in the Adobe Admin Console. A disabled user can no longer log in and shows as Disabled in the Directory Users list. Google Sync continues to manage a user deprovisioned by one of these methods. Neither the user’s account nor cloud-stored assets are removed from the organization. 

Remove a user and associated data from the Admin Console: Choose Go to Settings from the Directory settings Sync tab and click Enable editing. Then navigate to Users > Directory Users and choose the user from the list to permanently delete the account.

Once editing is enabled, it allows edits in the synced data for one hour before getting automatically disabled. We recommend you to click Disable editing immediately after user removal to ensure that the Admin Console reflects Google Admin Console changes.

Pozor:

If you permanently delete a user, the user is deleted along with all the cloud-stored assets belonging to that user. The user and the assets cannot be recovered once this action is taken.

Quarantine policy

Adobe has a quarantine policy to handle numerous error calls during sync operations. 

Adobe’s service independently monitors sync health to verify when the error rate surpasses a certain threshold in a set amount of time. A minimum number of requests resulting in an error that meets the threshold will enact temporary quarantine, resulting in rejecting all calls and update requests from the Google Admin Console for a time period, after which calls will be accepted again for sync retry. If error calls persist, the sync will be placed on temporary probation for an extended time period in quarantine. If Adobe initiates the quarantine, it may also lead to a subsequent quarantine with Google due to the rejected calls, which will count toward error rates in Google. Note that Adobe reserves the right to update the quarantine parameters based on ongoing data analytics.

Opomba:

Google may quarantine sync based on error rate.

Common error messages

A set of common error messages is displayed to be aware of when managing Google Sync from the Google Admin Console. Understanding the cause of the various error messages will aid in troubleshooting when errors occur.

You can find sync logs and error logs under the Auto-provisioning section of the Adobe SAML app within the Google Admin ConsoleLearn more about monitoring your deployment within the Google Admin Console.

Google OU sync errors

You might face syncing errors while syncing Google Organizational Units to Adobe Admin Console. Google logs display the following errors:

  • Failed because OU depth is greater than 10: max depth limit reached
  • Failed because OU attribute would yield groups that are too long: group name shouldn't be longer than 256 characters
  • Failed because OU attribute contains disallowed chars for group names: OU name contains disallowed characters

Troubleshooting

As the Adobe Admin Console uses the Google sync service, all sync issues are troubleshot within the Google Admin Console. You can refer to Google's configuration instructions to solve some common issues. If you are unable to find a solution, we recommend you to contact Google customer support for further assistance.

Follow the instructions below to diagnose a sync issue:

  1. Confirm your setup:

    Make sure you've configured the users and groups as per the setup instructions:

  2. Confirm mapping of the user details.

     
    Opomba:

    If you want to sync Google Organizational Units, make sure that your User Provisioning attribute mapping includes the Organizational unit path as urn:ietf:params:scim:schemas:extension:Adobe:2.0:User.organizationalUnit .

  3. Monitor your provisioning application to uncover issues that may affect sync:

    If the users don't appear in the provisioning logs, they may be out of scope. If the provisioning logs show an issue, fix it to allow the user to sync.

  4. Allow editing synced data in Adobe Admin Console:

    After you enable editing, you can edit synced data in the Adobe Admin Console for a brief period. Any edits during this time do not affect user information in the Google Admin Console. Later, your identity provider's change requests automatically overwrite these brief changes.

 Adobe

Pridobite pomoč hitreje in preprosteje

Ali ste nov uporabnik?

Adobe MAX 2024

Adobe MAX
Konferenca o ustvarjalnosti

14.–16. oktober v Miami Beachu in spletu

Adobe MAX

Konferenca o ustvarjalnosti

14.–16. oktober v Miami Beachu in spletu

Adobe MAX 2024

Adobe MAX
Konferenca o ustvarjalnosti

14.–16. oktober v Miami Beachu in spletu

Adobe MAX

Konferenca o ustvarjalnosti

14.–16. oktober v Miami Beachu in spletu