Education Deployment Setup With User Sync

Adobe Admin console > Settings > Create Directory 

Enter a name for the directory—this is an internal name and is not shared publicly—and select Federated Directory. 

Follow Azure/Entra, Google, or SAML steps to configure the federated directory with your identity provider.  

On the confirmation screen, set auto account creation to Not enabled. In this setup, users are created and managed via sync.

Once the directory screen is completed, claim domains using a Microsoft Global Admin Account or a Google Super Admin; this will list all available Domain/s in your identity provider console. If your organization is not using Azure/Entra or Google, you can validate domain ownership by creating a DNS text record with your domain registrar. 

Domain Claim Guide 

Select the Sync Tab
From here you select Add sync

Select sync from Microsoft or Google

This will then open a configuration window for your selected sync provider.

Microsoft Sync Setup

If setting up a new directory, the Adobe Identity Management App is installed during the directory authentication stage. 

To access the app visit

Azure > Enterprise Applications > Adobe Identity Management

Select Provisioning > Get Started

Copy the values from the Adobe Admin Console sync configuration screen and paste them into the provisioning configuration screen in Azure.

Test the connection

You can select the users and groups to which you need to assign license.

Tip > To test provisioning after selecting the users or groups, choose Provision on demand and identify a user to test the sync.

After the sync, you can visit the Adobe Admin Console > Users > User Group to see the synced groups and users.

After testing the sync, please enable it in Azure and confirm the setup on the Adobe Admin Console sync config screen.

Google Sync Setup

If setting up a new directory, the Adobe (SAML) app is installed during the directory authentication stage. 

To access the app, visit

Google Admin Console  > Apps > Web and Mobile > Adobe web (SAML)

Enable the App for everyone or specific OU's

Select Configure Auto-Provisioning

Copy the values from the Adobe Admin Console sync configuration screen and paste them into the provisioning configuration screen in Google.

On the attribute mapping screen, enable the organizational Unit field to sync.

urn:ietf:params:scim:schemas:extension:Adobe:2.0:User.organizationalUnit to map to Organization unit path

After completing the wizard > Enable Sync

Users can take up to 10 minutes to appear in the Adobe Admin Console. 

For the products you plan to assign to users, select the product and the product profile. Every product will have a default configuration.  

Adobe Admin Console > Products > Select a Product > Product Profile 

The product profile provides the following controls

• Control Services within the product - Firefly for K-12 
• License Quota number of licenses that can be assigned from this profile
• Email notification - Notify users if a license is assigned or removed

Adobe Admin Console > Users > User Groups 

Select a user group

Select Assigned Product Profiles 

Here, you can select or change product profiles assigned to the group.

When a user is synced and added to this group, they will receive the product profiles assigned to the group. If a user is removed from the sync group, for example, they have left the organization, their product assignment from this group will be removed, and the license will be re-assigned to another user.

You can create multiple product profiles for each product with different settings. If you have more than one product profile for a product, you can select the specific profile when assigning it to the group.