User Guide Cancel

Manage existing directories and domains

Search
Enterprise

Enterprise

Admin Console
  1. Adobe Enterprise & Teams: Administration guide
  2. Plan your deployment
    1. Basic concepts
      1. Licensing
      2. Identity
      3. User management
      4. App deployment
      5. Admin Console overview
      6. Admin roles
    2. Deployment Guides
      1. Named User deployment guide
      2. SDL deployment guide
      3. Deploy Adobe Acrobat 
    3. Deploy Creative Cloud for education
      1. Deployment home
      2. K-12 Onboarding Wizard
      3. Simple setup
      4. Syncing Users
      5. Roster Sync K-12 (US)
      6. Key licensing concepts
      7. Deployment options
      8. Quick tips
      9. Approve Adobe apps in Google Admin Console
      10. Enable Adobe Express in Google Classroom
      11. Integration with Canvas LMS
      12. Integration with Blackboard Learn
      13. Configuring SSO for District Portals and LMSs
      14. Add users through Roster Sync
      15. Kivuto FAQ
      16. Primary and Secondary institution eligibility guidelines
  3. Set up your organization
    1. Identity types | Overview
    2. Set up identity | Overview
    3. Set up organization with Enterprise ID
    4. Setup Azure AD federation and sync
      1. Set up SSO with Microsoft via Azure OIDC
      2. Add Azure Sync to your directory
      3. Role sync for Education
      4. Azure Connector FAQ
    5. Set up Google Federation and sync
      1. Set up SSO with Google Federation
      2. Add Google Sync to your directory
      3. Google federation FAQ
    6. Set up organization with Microsoft ADFS
    7. Set up organization for District Portals and LMS
    8. Set up organization with other Identity providers
      1. Create a directory
      2. Verify ownership of a domain
      3. Add domains to directories
    9. SSO common questions and troubleshooting
      1. SSO Common questions
      2. SSO Troubleshooting
      3. Education common questions
  4. Manage your organization setup
    1. Manage existing domains and directories
    2. Enable automatic account creation
    3. Set up organization via directory trust
    4. Migrate to a new authentication provider 
    5. Asset settings
    6. Authentication settings
    7. Privacy and security contacts
    8. Console settings
    9. Manage encryption  
  5. Manage users
    1. Overview
    2. Administrative roles
    3. User management strategies
      1. Manage users individually   
      2. Manage multiple users (Bulk CSV)
      3. User Sync tool (UST)
      4. Microsoft Azure Sync
      5. Google Federation Sync
    4. Assign licenses to a Teams user
    5. In-app user management for teams
      1. Manage your team in Adobe Express
      2. Manage your team in Adobe Acrobat
    6. Add users with matching email domains
    7. Change user's identity type
    8. Manage user groups
    9. Manage directory users
    10. Manage developers
    11. Migrate existing users to the Adobe Admin Console
    12. Migrate user management to the Adobe Admin Console
  6. Manage products and entitlements
    1. Manage products and product profiles
      1. Manage products
      2. Buy products and licenses
      3. Manage product profiles for enterprise users
      4. Manage automatic assignment rules
      5. Entitle users to train Firefly custom models
      6. Review product requests
      7. Manage self-service policies
      8. Manage app integrations
      9. Manage product permissions in the Admin Console  
      10. Enable/disable services for a product profile
      11. Single App | Creative Cloud for enterprise
      12. Optional services
    2. Manage Shared Device licenses
      1. What's new
      2. Deployment guide
      3. Create packages
      4. Recover licenses
      5. Manage profiles
      6. Licensing toolkit
      7. Shared Device Licensing FAQ
  7. Get started with Global Admin Console
    1. Adopt global administration
    2. Select your organization
    3. Manage organization hierarchy
    4. Manage product profiles
    5. Manage administrators
    6. Manage user groups
    7. Update organization policies
    8. Manage policy templates
    9. Allocate products to child organizations
    10. Execute pending jobs
    11. Explore insights
    12. Export or import organization structure
  8. Manage storage and assets
    1. Storage
      1. Manage enterprise storage
      2. Adobe Creative Cloud: Update to storage
      3. Manage Adobe storage
    2. Asset migration
      1. Automated Asset Migration
      2. Automated Asset Migration FAQ  
      3. Manage transferred assets
    3. Reclaim assets from a user
    4. Student asset migration | EDU only
      1. Automatic student asset migration
      2. Migrate your assets
  9. Manage services
    1. Adobe Stock
      1. Adobe Stock credit packs for teams
      2. Adobe Stock for enterprise
      3. Use Adobe Stock for enterprise
      4. Adobe Stock License Approval
    2. Custom fonts
    3. Adobe Asset Link
      1. Overview
      2. Create user group
      3. Configure Adobe Experience Manager Assets
      4. Configure and install Adobe Asset Link
      5. Manage assets
      6. Adobe Asset Link for XD
    4. Adobe Acrobat Sign
      1. Set up Adobe Acrobat Sign for enterprise or teams
      2. Adobe Acrobat Sign - Team feature Administrator
      3. Manage Adobe Acrobat Sign on the Admin Console
    5. Creative Cloud for enterprise - free membership
      1. Overview
  10. Deploy apps and updates
    1. Overview
      1. Deploy and deliver apps and updates
      2. Plan to deploy
      3. Prepare to deploy
    2. Create packages
      1. Package apps via the Admin Console
      2. Create Named User Licensing Packages
      3. Manage pre-generated packages
        1. Manage Adobe templates
        2. Manage Single-app packages
      4. Manage packages
      5. Manage device licenses
      6. Serial number licensing
    3. Customize packages
      1. Customize the Creative Cloud desktop app
      2. Include extensions in your package
    4. Deploy Packages 
      1. Deploy packages
      2. Deploy Adobe packages using Microsoft Intune
      3. Deploy Adobe packages with SCCM
      4. Deploy Adobe packages with ARD
      5. Install products in the Exceptions folder
      6. Uninstall Creative Cloud products
      7. Use Adobe provisioning toolkit enterprise edition
    5. Manage updates
      1. Change management for Adobe enterprise and teams customers
      2. Deploy updates
    6. Adobe Update Server Setup Tool (AUSST)
      1. AUSST Overview
      2. Set up the internal update server
      3. Maintain the internal update server
      4. Common use cases of AUSST   
      5. Troubleshoot the internal update server
    7. Adobe Remote Update Manager (RUM)
      1. Release notes
      2. Use Adobe Remote Update Manager
    8. Troubleshoot
      1. Troubleshoot Creative Cloud apps installation and uninstallation errors
      2. Query client machines to check if a package is deployed
  11. Manage your Teams account
    1. Overview
    2. Update payment details
    3. Manage invoices
    4. Change contract owner
    5. Change your plan
    6. Change reseller
    7. Cancel your plan
    8. Purchase Request compliance
  12. Renewals
    1. Teams membership: Renewals
    2. Enterprise in VIP: Renewals and compliance
  13. Manage contracts
    1. Automated expiration stages for ETLA contracts
    2. Switching contract types within an existing Adobe Admin Console
    3. Value Incentive Plan (VIP) in China
    4. VIP Select help
  14. Reports & logs
    1. Audit Log
    2. Assignment reports
    3. Content Logs
  15. Get help
    1. Contact Adobe Customer Care
    2. Support options for teams accounts
    3. Support options for enterprise accounts
    4. Support options for Experience Cloud

Applies to enterprise.

After setting up the directories and associating them to users in the Admin Console, admins might need to realign the assignments later. Use this document to learn techniques to manage domains and directories to help you with your user management. 

Select a topic as per your requirement:

Move domains across directories. Learn more.

Remove domains and delete directories. Learn more.

Move a directory to a different Admin Console. Learn more.

Move domains across directories

Organizations can structure directories by moving domains from source directories to target directories within the Admin Console. You can reorganize domain-directory linking based on your organization’s needs without end users losing access to their products, services, or stored assets. Consolidating domains configured for the same identity provider into a single directory streamlines management for your IT teams.

If you plan to migrate domains from a directory to another one that contains a new identity provider (Azure, Google or other SAML) with SHA-2 authentication, you must replicate the new IdP setup in both the directories. The new IdP setup enables test login for users of all domains within the directory. Do the following based on your new identity provider:

  • For Microsoft Azure: Add a new Azure IdP to your directory and log into the same Azure tenant.
  • For Other SAML providers (including Google): Upload the same metadata file, which will point to the same SAML app on your IdP.

After the domain migration is complete, users, who are part of the new directory, will still have the ability to log in. This will eliminate downtime and ensure immediate access to their assigned Adobe apps and services. 

Caution:
  • Users are logged out of their accounts and cannot log in to a new session during a domain transfer. Editing directories in off-peak hours is recommended to minimize end-user disruption.
  • There are specific steps to migrate a domain that includes a trust relationship.  You should not revoke a trust relationship when migrating a trusted domain to prevent the loss of user account and product access in the trustee’s organization.
  • Before any domain migration, we strongly recommend that you export a user list from the Admin Console or Consoles involved prior to making changes. This list will provide a snapshot of all user data, including name, email, assigned product profiles, and assigned admin roles in the case a rollback needs to be performed.

Why move domains

You can benefit from this feature in the following scenarios:

  • You want to migrate an existing directory to another identity provider.
  • You have directories in a trust relationship or want to share directories for trusting, without allowing access to all domains within the trusted directory.
  • You have to group directories based on organization teams and departments.
  • You have several directories that are linked to single domains and want to consolidate.
  • You accidentally linked a domain to an incorrect directory.
  • You want to self-serve move a domain from Enterprise ID to Federated ID or Federated ID to Enterprise ID.

Handling encrypted or trusted directories

If the source or target directories are encrypted or are in a trust relationship, you are unable to move domains directly. Follow the given instructions to move domains in these cases:
 

Use case

Example

Suggested approach

To move domains between directories that are in the same trust relationship

Directory 1 and Directory 2 are configured in Console A and both have a trust relationship established with Console B.

Follow the move domain process.

To move domains between directories that are in trust relationships

* See Figure A for process diagrams

Directory 1 is configured in Console A and has a trust relationship established with Console B.

Within Console A, a domain in Directory 1 (Domain X) needs to move to Directory 2.

 

  1. Export a user list from the Console that owns the trust and all trustee Consoles prior to making changes.
  2. Establish a trust between all trustees and the destination directory (Directory 2) in Console A.
  3. Move domains from current directory (Directory 1) to destination directory (Directory 2) in Console A.
  4. Revoke a trust relationship from trustees in Directory 1 in Console A.
  5. Trustee removes revoked domain from Console B (repeat this step for additional trustees).
  6. When Directory 1 is in an empty state with no domains or trusts, you can delete the empty directory.

 

To move a domain or directory containing multiple domains to another Admin Console in your organization

Directory 1 is configured in Console A. But Directory 1 and its claimed domains need to move to Console B for ownership.

Reach out to Adobe Customer Care.

To move domains to or from an encrypted directory within the same Admin Console.

Directory 1 has encryption turned ON, and a domain from Directory 2 in the same Admin Console requires migration to Directory 1.

Moving domains to or from an encrypted directory is currently not supported.

Original state

Original state

Trusting State

Trusting state

Migrated State

Migrated State

How to move a domain

Follow the process below to transfer domains from a source directory to a target directory:

  1. Sign in to the Adobe Admin Console and go to Settings.

  2. Navigate to Domains and select the domains you want to move to the target directory. Then, select Transfer domains from the   menu.

  3. Select a directory from the dropdown on the Transfer domains screen. Use the Get notified toggle to switch completion notifications on or off. Then, select Transfer.

You are sent to the Domains section under Settings > Identity. All the domains with their status are listed.

Once the domains have been transferred successfully, the system admins receive an email about the domain transfer. Next, you can edit directory names and delete empty directories as required.

Move a directory to a different Admin Console

If your organization uses multiple Admin Consoles to manage users and entitlements, you might need to move one set of users from one Admin Console to the other. Use the Admin Console to request to migrate a directory to a different Admin Console owned by your organization.

This type of migration can only be performed for two Admin Consoles under the same ownership and with Adobe's assistance. An Adobe representative will work with you to plan & schedule that migration if this is the right option.

Why move a directory

You can benefit from this feature in the following scenarios:

  • You want to change the ownership of a directory from System Admins in one organization to another.
  • You need to consolidate or centralize your identity management.
  • You need to isolate or de-centralize your identity management.
  • You plan to decommission an organization that has a directory setup.
  • You have to group directories based on organization teams and departments.
Note:
  • If you have users associated with multiple domains, you can first move domains into a single directory, then move the directory to another Admin Console using the process below.
  • You DO NOT need to migrate your directory to a different Admin Console if you are switching to a new contract. You can add a new contract to an existing Admin Console when switching from an expiring contract. Learn more.
  • Currently, you can only move directories across Admin Consoles where both the source and destination consoles reside on Adobe's user storage model.

How to move a directory

Follow the process below to move a directory to the desired Admin Console:

  1. Sign in to the Admin Console, navigate to the Support section, and Create new case.

  2. Navigate to Manage users and licenses > Create Case, then enter Directory Move in the Summarize the issue field.

  3. Describe your request with the relevant details, such as the organizations (Admin Consoles) you'd like to move the Directory between.

    If you have been provided with a "checklist" by your current Adobe representative (not mandatory), please attach that checklist to the support ticket or mention their name to the request. 

    Then, select Submit.

  4. An Adobe representative will contact you regarding any details of your request. Work with the representative to schedule a time slot to avoid any disruption during the minor downtime during migration.

Note:

If your directory is integrated with automated sync, such as Azure Sync or Google Sync, User Sync Tool, or the User Management API, you'll be asked to pause the sync while the migration is processed. Then, resume sync once the associated directory is migrated to the target Admin Console.

Delete directories and remove domains

You can delete directory and domains from the Admin Console that are no longer in use.

Note:

You cannot delete a directory that has:

  • Active users
  • Linked domains
  • Trustees
  • Default Business ID directories

  1. Sign in to the Admin Console and navigate to Settings > Identity.

  2. Go to the Directories tab.

  3. Select the check box to the left of one or more directory names and select Delete Directories.

  4. In the delete directories screen, select Delete.

Note:

You cannot remove a domain if there are users with that domain in the Admin Console or if the domain is linked to one or more directories.

  1. Sign in to the Admin Console and navigate to Settings > Identity.

  2. Go to the Domains tab.

  3. Select the check box to the left of one or more domain names and select Remove domain.

  4. Select Remove in the Remove domains screen.

Get help faster and easier

New user?

Quick links

View all your plans Manage your plans
View quick links
Hide quick links

Legal Notices    |    Online Privacy Policy