User Guide Cancel

Roster syncing for license assignment with the Adobe Admin Console

  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin Console overview
      6. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
      3. Deploy Adobe Acrobat 
    3. Deploy Creative Cloud for education
      1. Deployment home
      2. K-12 Onboarding Wizard
      3. Simple setup
      4. Syncing Users
      5. Roster Sync K-12 (US)
      6. Key licensing concepts
      7. Deployment options
      8. Quick tips
      9. Approve Adobe apps in Google Admin Console
      10. Enable Adobe Express in Google Classroom
      11. Integration with Canvas LMS
      12. Integration with Blackboard Learn
      13. Configuring SSO for District Portals and LMSs
      14. Add users through Roster Sync
      15. Kivuto FAQ
      16. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Identity types | Overview
    2. Set up identity | Overview
    3. Set up organization with Enterprise ID
    4. Setup Azure AD federation and sync
      1. Set up SSO with Microsoft via Azure OIDC
      2. Add Azure Sync to your directory
      3. Role sync for Education
      4. Azure Connector FAQ
    5. Set up Google Federation and sync
      1. Set up SSO with Google Federation
      2. Add Google Sync to your directory
      3. Google federation FAQ
    6. Set up organization with Microsoft ADFS
    7. Set up organization for District Portals and LMS
    8. Set up organization with other Identity providers
      1. Create a directory
      2. Verify ownership of a domain
      3. Add domains to directories
    9. SSO common questions and troubleshooting
      1. SSO Common questions
      2. SSO Troubleshooting
      3. Education common questions
  4. Manage your organization setup
    1. Manage existing domains and directories
    2. Enable automatic account creation
    3. Set up organization via directory trust
    4. Migrate to a new authentication provider 
    5. Asset settings
    6. Authentication settings
    7. Privacy and security contacts
    8. Console settings
    9. Manage encryption  
  5. Manage users
    1. Overview
    2. Administrative roles
    3. User management strategies
      1. Manage users individually   
      2. Manage multiple users (Bulk CSV)
      3. User Sync tool (UST)
      4. Microsoft Azure Sync
      5. Google Federation Sync
    4. Assign licenses to a Teams user
    5. In-app user management for teams
      1. Manage your team in Adobe Express
      2. Manage your team in Adobe Acrobat
    6. Add users with matching email domains
    7. Change user's identity type
    8. Manage user groups
    9. Manage directory users
    10. Manage developers
    11. Migrate existing users to the Adobe Admin Console
    12. Migrate user management to the Adobe Admin Console
  6. Manage products and entitlements
    1. Manage products and product profiles
      1. Manage products
      2. Buy products and licenses
      3. Manage product profiles for enterprise users
      4. Manage automatic assignment rules
      5. Entitle users to train Firefly custom models
      6. Review product requests
      7. Manage self-service policies
      8. Manage app integrations
      9. Manage product permissions in the Admin Console  
      10. Enable/disable services for a product profile
      11. Single App | Creative Cloud for enterprise
      12. Optional services
    2. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Manage profiles
      6. Licensing toolkit
      7. Shared Device Licensing FAQ
  7. Get started with Global Admin Console
    1. Adopt global administration
    2. Select your organization
    3. Manage organization hierarchy
    4. Manage product profiles
    5. Manage administrators
    6. Manage user groups
    7. Update organization policies
    8. Manage policy templates
    9. Allocate products to child organizations
    10. Execute pending jobs
    11. Explore insights
    12. Export or import organization structure
  8. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    3. Reclaim assets from a user
    4. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  9. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Acrobat Sign
      1. Set up Adobe Acrobat Sign for enterprise or teams
      2. Adobe Acrobat Sign - Team feature Administrator
      3. Manage Adobe Acrobat Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
  10. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Manage pre-generated packages
        1. Manage Adobe templates
        2. Manage Single-app packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages using Microsoft Intune
      3. Deploy Adobe packages with SCCM
      4. Deploy Adobe packages with ARD
      5. Install products in the Exceptions folder
      6. Uninstall Creative Cloud products
      7. Use Adobe provisioning toolkit enterprise edition
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Release notes
      2. Use Adobe Remote Update Manager
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
  11. Manage your Teams account
    1. Overview
    2. Update payment details
    3. Manage invoices
    4. Change contract owner
    5. Change your plan
    6. Change reseller
    7. Cancel your plan
    8. Purchase Request compliance
  12. Renewals
    1. Teams membership: Renewals
    2. Enterprise in VIP: Renewals and compliance
  13. Manage contracts
    1. Automated expiration stages for ETLA contracts
    2. Switching contract types within an existing Adobe Admin Console
    3. Value Incentive Plan (VIP) in China
    4. VIP Select help
  14. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  15. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

System administrators can add users and provision them to the free Adobe Express for K12 or Adobe Creative Cloud for K-12 named user licence using roster to sync with Clever or Classlink

Note:

Currently, roster sync is only available in the United States.

By using your district portal provides the added advantage of using Clever or Classlink as a secondary authentication IDP to enable login to Adobe Express directly from the portal.

Authentication and user synchronization are separate processes and existing SAML connections to Microsoft Azure or Google Workspace for education will continue to work even if you choose to synchronize users via your Clever/Classlink Roster. Similarly, if you are synchronizing users from Azure or Google you can request the Adobe Express SSO-only app and Clever or Classlink to enable sign-in from the portal. Note: you can only have a single auto-syncing set-up for each directory of users (such as Azure Sync, Google Sync, Clever/Classlink Sync, User Sync Tool) but can always enable multiple IDP providers for SSO into Adobe Express.

A common scenario is to assign Adobe Express to all users in the district as this is free and unlimited. Districts then create a rule in Clever or Classlink to share specific students and teachers based on their course membership for the Creative Cloud K-12 license.

Note:

Once Clever or Classlink rostering is configured, the Roster Sync will become your source of truth. To support users that do not exist in the roster system, you can add manual groups that will be ignored by the roster synchronisation (see below).


Prerequisites

To use roster sync with Clever or Classlink, a school or district must have completed the following steps

  1. Have access to an Adobe Admin Console with either the free K-12 Adobe Express offer or the purchased Adobe Creative Cloud All Apps licenses.

    • For any school districts who are not current Adobe customers and would like access to Adobe Express for K-12, they can request free access via https://www.adobe.com/education/Express/deployment.
    • For districts wanting to purchase a Creative Cloud All Apps licence, they can contact their preferred reseller or call +1-800-685-3638.
  2. Once signed into the Adobe Admin Console, the System Administrator must accept the K-12 Adobe Express offer in the products page.

  3. Configure a Federated directory.

    Learn how to set up federation through Google and Azure here.

  4. Add Classlink or Clever as a secondary IDP. Navigate to Directory > Authentication > Add new IDP.

  5. Request Adobe Express and or Adobe Creative Cloud roster applications in your Classlink or Clever administration portal.

    • For Classlink roster sync requests are automatically approved.
    • For Clever districts and Adobe team member reviews to request and respond through the Clever portal within 72 hours – Districts that do not complete the sharing setup within two weeks will be disconnected. Admins can request the roster application again.
  6. Requested Adobe Express or Adobe Creative Cloud roster sync applications in its District Portal (Clever or Classlink).

    For Classlink districts, roster sync requests are automatically approved at the time of the request. For Clever districts, an Adobe team member reviews the request within 72 hours and responds either in the Clever portal or by email.


Note:

There are two separate apps that need to be requested to sync both (1) Adobe Express and (2) Creative Cloud. When setting up the sharing rules, ensure that at least one user is included in the sync scope for each app.

If more users are selected for the Creative Cloud sync than the licenses available, the sync will not complete. Please reduce the number of users in the sync scope to ensure you do not exceed your license count. This license count includes users manually assigned licenses via the manual group process.

(Optional) Manually Manage Users that are not on your Classlink/Clever roster 

For users that need access to Adobe Express or Creative Cloud but are not available in the roster application, you can create specific manual user groups within the Adobe Admin Console and manage their license provisioning by assigning them product profiles. Any users not in the manually managed user groups or the Clever/Classlink roster will get de-provisioned every time the Roster Sync runs.

Create the following user groups in the Adobe Admin Console.

Note:

The user group name should match exactly (case sensitive) the names provided below.

  • Manually Managed Users - Adobe Express
  • Manually Managed Users - CC All Apps

Once the groups are created you can assign licenses to group members by clicking on the Group name and selecting Assigned Product Profiles > Assign Product Profile.

Users can then be added to the console and then moved into this group to be ignored by the roster sync.

Configure roster sync

Once you have completed all the prerequisites follow these steps:

For consoles with an existing synchronization

Azure or Google

  1. Turn off the sync in The Azure Portal or the Google Workspace Admin.

  2. In the Adobe Admin Console, navigate to Settings > Federated Directory > Sync, edit the sync, and select Remove Sync.

    This will remove the sync but not delete any users, groups, or product license assignments.

Adobe User Sync Tool (UST)

Disable the scheduled task on the application server that is connected to your local user directory.

Setup Roster Sync

  1. Set up your sharing rules for Creative Cloud and or Adobe Express and complete the checklist in Clever.

    For all users requiring an Adobe license, you need to share First Name, Last Name, Email, and Role data from Clever/Classlink. 

  2. On the Adobe Admin Console, navigate to Settings > Federated Directory > Sync.

  3. Click Add Sync.

  4. Select Education Portal.

  5. Select your chosen portal.

  6. You will then be prompted to log in to your chosen portal and presented with a checkbox for Adobe Express and Creative Cloud. You can select either or both.

  7. Determine sync frequency. You can sync daily, weekly, monthly, or manually anytime you desire.

  8. Finish the sync setup. You can check the status of a sync within the Sync tab. All System Admins receive an email notification when a sync is complete.

    All Admins will receive a weekly email summary of their Roster Sync status (how many users were added, deleted). Admins will also receive emails immediately following the nightly sync if the sync encounters any errors.

You can change the cadence of auto-syncing, stop syncing, or initiate one-off syncs anytime by visiting the Admin Console and navigating to Settings > Federated Directory > Sync. To change sync settings, click the three-dot icon on the appropriate sync tile and select Sync Settings. Follow the steps in the wizard to change the syncing frequency.

Roster Sync product profiles

On the Product page of the Adobe Admin Console, you can select a product offer, Adobe Express or Creative Cloud and see product profiles associated with these products.

When completing the roster sync setup, new product profiles are created.

  • Adobe Express Roster Sync [System]
  • CC All Apps Edu Roster Sync [System]

This view will also display how many users are licensed by the roster sync and by editing the profile, you can disable product notifications for new users.

Note:

Changing the name or deleting the profiles will impact the end users.

Remove a roster sync

To remove a roster sync, do the following.

  1. In the Adobe Admin Console, navigate to Settings > Federated Directory > Sync.

  2. Click on the three-dot icon next to Queue Now, and select Sync Settings and choose Remove Sync.

  3. Confirm you would like to remove the sync.

    This will not delete any users or product assignments.

Additional advantages of using roster sync

Accurate Role Information

We recommend that, when possible, an Admin load roster information into Adobe Express, to save teachers time and to support user role information accuracy. Adobe Express uses teacher and student role information from your roster to ensure that users' in-product experiences match their roles, that a student sees student features, and that a teacher sees teacher features. The process to correct inaccurate user role information in Adobe Express is a manageable process but it can be avoided entirely by rostering at the Admin level.  

 

Auto Creation of Express Classroom

After a teacher's IT admin has set up roster sync between Adobe Express and Clever/Classlink, the next time the teacher views the Classroom tab in Express, their rostered classes will be present.​ Once a teacher’s rostered classes are available in Express, they can create Express project assignments with their students.

The district-level roster is always the source of truth and is controlled by the school admin (synced manually, daily or weekly). The teacher can click "Refresh roster" in each Express classroom to get the latest roster data. However, teachers cannot manually add users to their rostered classes.​ 

If a teacher deletes a rostered class from Express, Adobe will not re-sync or re-create such class the next time the teacher logs in.

Frequently Asked Questions

Why is my sync not working?

Admins should receive an error report indicating why their sync failed. See the Error States below for information on various error codes.

Can I pick the time at which Adobe roster daily sync runs?

At this time, we’re unable to control the time the sync runs when you have set up daily sync, although you can queue a sync at any time from within the Admin Console.

Why are some users not able to access Adobe products anymore?

Users must either (a) appear in the Roster Sync data or (b) appear in the specific “Manually Managed Users” groups to receive a license. Any users not in either of these data sets will be automatically de-provisioned. If the user is in one of these data sets and cannot access the product, please disable and re-establish the Roster Sync to clear the cache.

How is the information shared with Adobe from the roster used?

Adobe uses the First Name, Last Name, and Email from the shared roster to create Adobe accounts. Additionally, Adobe uses the class-level roster to enable the auto-creation of Express Classrooms on demand. Beginning in 2025, Adobe will use Subjects and Grade Levels for further in-product customization, like template recommendations.

How often is the sync performed?

The admin can select the sync cadence (manual, daily, and weekly) during setup and edit post-setup. Depending on the time of the school year and how often the school roster changes, the admin can select a suitable frequency for synchronization.

Error states with resolutions

Notification type

Description

Resolution

Sync Fail Email

Permissions are incorrectly configured on the Roster server. Adobe is not authorized or is unable to pull user data from ClassLink/Clever.
ClassLink or Clever returns non-500 Error.

Fix permissions on the Roster server.

Notification type

Description

Resolution

Sync Fail Email

You don't have enough licenses to assign.
Types: Creative Cloud All licenses are not enough.

Add more licenses or update Roster.

Notification type

Description

Resolution

Sync Fail Email

ClassLink or Clever Integration is missing for Adobe Creative Cloud All Apps. System Admins have removed the integration after the sync setup.

Set up your roster source for syncing.

Notification type

Description

Resolution

Sync Fail Email

ClassLink or Clever Integration is missing for Adobe Express. System Admins have removed the integration after the sync setup.

Set up your roster source for syncing.

Notification type

Description

Resolution

Sync Fail Email

Clever or Classlink district portal is unavailable. Check the status of the portal on their website.

Retry after some time as Clever or ClassLink is down.
System Admins can see the status here:
https://status.clever.com/
https://status.classlink.com/

Notification type

Description

Resolution

Sync Fail Email

Invalid Sync Card configuration in Adobe Admin Console. Potential causes:

  • The Technical Account setup is broken.
  • The directory is not part of the Org anymore.
  • The Org does not exist anymore.

If you get an invalid status on the sync card, delete the card and add it back.

Notification type

Description

Resolution

Sync Fail Email

Edu Roster ran into an error, it should resolve upon retry.

Retrigger the sync.

Notification type

Description

Resolution

Sync Fail Email

The product has multiple active offers configured in Adobe. The roster system is not able to decide which offer is to be provisioned.

Contact your Adobe representative or navigate to Adobe Admin Console > Support, and contact Adobe Customer Care.

Notification type

Description

Resolution

Sync Completion Email

Roster Error Data Missing. One of the following fields not coming across on the roster from Clever/Classlink: First name, Last Name, Email, Role.

Ensure that roster data contains all fields.

Notification type

Description

Resolution

Sync Completion Email

UMAPI Error because this user was disabled from a previous sync set up with Adobe.

Contact your Adobe representative or navigate to Adobe Admin Console > Support, and contact Adobe Customer Care.

Teacher Validation policy

This setting is located in the Adobe Admin Console > Settings > Directory Settings

If you are unable to Roster sync with the Adobe Admin console, a policy option forces teachers to go through Sheer ID instant validation. This validation process uses the teacher's name and school to verify their status. Teachers are not required to upload any documentation.

A screenshot of the admin console directory settings

https://www.sheerid.com/privacy_overview/

The impact of turning on this policy

Self-identified teachers (via in-product survey or modal) who have not added any students to any of their classes and attempt to do so will:

  • See a prompt to verify their educator status.

  • Not be able to invite students to any of their classes until their educator status is verified.


Self-identified teachers (via in-product survey or modal) who have already added students to any of their classes will be completely blocked from taking further action in classrooms until they verify their educator status.

Classroom requiring a teacher to verify.

Change your role to view classrooms

To be able to view classrooms in Adobe Express, your role setting needs to be either ‘Educator’ or ‘None of the above’. To change your role:

  1. Select your profile in the upper right corner of Express to open a drop-down menu.

  2. Scroll down and select Settings.

  3. Scroll down to Role Settings and select your role from the available options: ‘I am an Educator,’ ‘I am a Student,’ ‘None of the above.'

 Adobe

Get help faster and easier

New user?