Sign in to the Admin Console and navigate to Users.
- Adobe Enterprise & Teams: Administration guide
- Plan your deployment
- Basic concepts
- Deployment Guides
- Deploy Creative Cloud for education
- Deployment home
- K-12 Onboarding Wizard
- Simple setup
- Syncing Users
- Roster Sync K-12 (US)
- Key licensing concepts
- Deployment options
- Quick tips
- Approve Adobe apps in Google Admin Console
- Enable Adobe Express in Google Classroom
- Integration with Canvas LMS
- Integration with Blackboard Learn
- Configuring SSO for District Portals and LMSs
- Add users through Roster Sync
- Kivuto FAQ
- Primary and Secondary institution eligibility guidelines
- Set up your organization
- Identity types | Overview
- Set up identity | Overview
- Set up organization with Enterprise ID
- Setup Azure AD federation and sync
- Set up Google Federation and sync
- Set up organization with Microsoft ADFS
- Set up organization for District Portals and LMS
- Set up organization with other Identity providers
- SSO common questions and troubleshooting
- Manage your organization setup
- Manage users
- Overview
- Administrative roles
- User management strategies
- Assign licenses to a Teams user
- In-app user management for teams
- Add users with matching email domains
- Change user's identity type
- Manage user groups
- Manage directory users
- Manage developers
- Migrate existing users to the Adobe Admin Console
- Migrate user management to the Adobe Admin Console
- Overview
- Manage products and entitlements
- Manage products and product profiles
- Manage products
- Buy products and licenses
- Manage product profiles for enterprise users
- Manage automatic assignment rules
- Entitle users to train Firefly custom models
- Review product requests
- Manage self-service policies
- Manage app integrations
- Manage product permissions in the Admin Console
- Enable/disable services for a product profile
- Single App | Creative Cloud for enterprise
- Optional services
- Manage Shared Device licenses
- Manage products and product profiles
- Get started with Global Admin Console
- Adopt global administration
- Select your organization
- Manage organization hierarchy
- Manage product profiles
- Manage administrators
- Manage user groups
- Update organization policies
- Manage policy templates
- Allocate products to child organizations
- Execute pending jobs
- Explore insights
- Export or import organization structure
- Manage storage and assets
- Storage
- Asset migration
- Reclaim assets from a user
- Student asset migration | EDU only
- Manage services
- Adobe Stock
- Custom fonts
- Adobe Asset Link
- Adobe Acrobat Sign
- Creative Cloud for enterprise - free membership
- Deploy apps and updates
- Overview
- Create packages
- Customize packages
- Deploy Packages
- Manage updates
- Adobe Update Server Setup Tool (AUSST)
- Adobe Remote Update Manager (RUM)
- Troubleshoot
- Manage your Teams account
- Renewals
- Manage contracts
- Reports & logs
- Get help
Applies to enterprise.
If you are already using an identity type and need to edit your identity model, you can change your end user's identity type as a System administrator.
The procedures described in this document don’t apply to:
- Adobe Experience Cloud customers. If you're an Experience Cloud customer, contact Adobe Customer Care.
- Adobe teams customers.
Introduction
As a system admin, you can edit the following identity types of your users on the Adobe Admin Console:
- Enterprise ID to Federated ID
- Federated ID to Enterprise ID
- Adobe ID to Enterprise ID or Federated ID
You need a new or an existing directory to change the identity type of a user from Enterprise ID to Federated ID or conversely (See introduction to identity setup). For more details, see move domains across directories.
The following matrix provides an overview of the identity type migration workflows:
Adobe ID to Enterprise ID |
Adobe ID to Federated ID |
Adobe ID to Federated ID (Azure & Google Sync) |
Enterprise ID to Federated ID |
Federated ID to Enterprise ID |
|
---|---|---|---|---|---|
How to | In the Admin Console, navigate to Users and choose Edit Identity Type by CSV. |
Note: For migration, users must exist in Admin Console. |
Change the directory that the domain is linked to. Users are automatically migrated. | ||
What happens to user assets |
Assets are auto migrated |
Users with Creative Cloud entitlements: Assets are auto-migrated. Users with Document Cloud or other non-Creative Cloud entitlements: Assets aren’t auto-migrated. Manual migration is required. |
Assets are auto-migrated. |
||
Assets of users in different regions aren’t auto-migrated. Manual migration is required. For details on regions, see Regions and Availability zones. |
|||||
Notes: |
|
Adobe recommends that you don't migrate users in encrypted directories or organizations.. |
Impact on end users
If you edit the identity type of users from Adobe ID to Federated ID or Enterprise ID, the users continue to have access to their personally owned Adobe ID. However, they access the organization’s Adobe apps, services, and solutions through the new Federated ID or Enterprise ID assigned to them.
If your Creative Cloud end users already have an Adobe ID with linked assets, they can migrate assets from their Adobe ID account to their new enterprise account.
- The CSV file used in the procedure described below, may use a comma (,) or a semi-colon (;) as the separator.
- You can also edit user details such as email addresses and names for users using the Admin Console, User Sync tool, or the User management API.
- Ensure that you allow Azure Sync to synchronize the users before uploading the CSV to do the identity type switch.
-
-
Click , and select Edit Identity Type by CSV from the drop-down list.
The Edit Identity Type by CSV dialog box displays.
-
To include users to edit Identity type, download the current user list, CSV standard template or Domain user list, click Download CSV Template.
Field Name
Description
Identity Type
The identity type currently assigned to the user.
User name
Username as it corresponds to the respective user ID.
Domain
The claimed domain as it corresponds to the Enterprise or Federated ID.
New Identity Type
Enter the identity type that you want to change to.
This value controls the ID type assigned to the user. Not case sensitive. The ID type must be valid for the domain.
Valid values:
- Federated ID
- Enterprise ID
- Adobe ID
New Email
Valid email address.
60 character maximum.
A name and domain. If the identity type is Enterprise ID or Federated ID, the organization must claim and activate the domain.
For other account types, it’s the email address used for the user and account name.
New user name
Restricted to ASCII.
Username as it corresponds to the respective user ID.
For Business or Adobe ID type users, the username that is defined for the Business or Adobe ID of the user.
Only used in Enterprise administered domains. Account name to be used for this user. Restrictions to an email address and the same email address can be imposed by the domain owner.
Maximum length is 255 characters.
New Country Code
A two-letter country code (for example, United States = "US").
If present, check to ensure that the user is from a country where Adobe does the business. It’s present for Enterprise administered accounts.
To determine the Country Code, see https://www.iso.org/obp/ui/#home.
For more information, see ISO 3166-1 alpha-2 Country Codes.
- Federated ID
-
Open the .csv file in an application (such as Microsoft® Excel) capable of editing CSVs and edit the identity types, as required.
Note:When you are editing the identity type from Adobe ID to Federated/Enterprise ID, the email address for Adobe ID or must match the one for the enterprise account.
-
Select Edit Identity Type by CSV dialog box and upload the updated .csv file.
Ensure that this file is saved with UTF-8 encoding.
Once the process is complete, you'll receive a notification email.
This process migrates the permissions and provisioned products for all migrated users. The users whose identity has changed, receive a notification to use their new Enterprise, or Federated ID account when working with the Adobe products they have been provisioned.
This report tells you who has granted consent, who has denied consent, and who hasn’t taken any action yet. To know about the type of content that the migration process supports, see Asset Migration FAQ.
-
Navigate to Admin Console > Users.
-
Click and select Export migration report to CSV from the drop-down list.
The report is downloaded.
Migrating Adobe IDs to Enterprise or Federated IDs
If your users were previously using Adobe IDs and have linked assets, these users will be requested to consent to the Asset Migration process. The Asset Migration process automatically moves the users' assets from their Adobe ID account to their Enterprise account.
Asset migration
When you edit the identity type of the users from Adobe ID to Federated ID or Enterprise ID, users can migrate the supported content from their existing company assigned Adobe ID account to their new enterprise account. The migration can be done in two ways:
For users to automatically migrate their content, they must be assigned access to storage/services for both, Creative Cloud and Document Cloud. For users to have access to storage for Creative Cloud and Document Cloud, do one of the following:
- Assign a Product Profile which offers the Creative Cloud All Apps plan with storage, and has the PDF Services turned On.
- Assign a Creative Cloud Product Profile with storage, and a Document Cloud Product Profile with storage (excludes desktop only offers) and PDF Services turned On.
All product licenses that the user is assigned to, must have storage included. Otherwise, Asset Migration fails. For example, an Adobe ID user allocated to a single app license for Photoshop with no storage and another single app license for XD with 100-GB storage cannot migrate the assets automatically.
After the migration is complete, the end-user receives an email notification with the details to migrate their assets.
You can download the Asset Migration completion status report for all the users that were part of the migration.
Join the conversation
If you have any questions or observations around the topics, concepts, or procedures described in this article, join the discussion.