Understand how federated users in Adobe can create organization accounts automatically using verified email domains.
Automatic account creation lets federated users with verified email domains create organization accounts independently. Eligible users can establish their federated identities via single sign-on, eliminating the need for administrators to manually provision their accounts. This feature is available only to Adobe Enterprise customers who have configured one or more federated directories in the Admin Console.
How automatic account creation works
When enabled for a federated directory, automatic account creation allows users with verified email domains to create federated accounts during sign-up. The feature relies on domain verification and directory configuration to determine user eligibility.
Federated accounts created through this process integrate with your organization's identity provider, enabling secure single sign-on access.
Benefits for administrators
Automatic account creation offers the following operational and security advantages:
- Organizational control: Federated users participate in sharing and collaboration workflows using organization-owned accounts rather than personal accounts with organization-owned domains.
- Secure authentication: Users sign in through single sign-on, using your organization's authentication infrastructure.
- Reduced administrative overhead: Users create accounts on demand with minimal administrator involvement.
- Access management: Administrators maintain control over product licenses, cloud-stored assets, and sharing restrictions for all federated users.
The feature integrates with automatic assignment rules to automatically provision products to eligible users. It also integrates with product requests to enable user-initiated access requests for administrator review.
User experience during account creation
Users encounter the automatic account creation option when entering an email address during account creation. The system checks if the email qualifies by verifying the following conditions:
- The domain matches a verified federated directory with automatic account creation enabled
- The email isn’t already linked to an existing Adobe account.
When both conditions are met, the account creation interface presents a Sign in option beneath the email address field, prompting the user to authenticate with their organization's single sign-on system. Successful authentication with the identity provider completes the account creation and establishes the federated account within the appropriate directory based on the user's domain.
Account management and tracking
User accounts created via automatic account creation display their source in the User Details view of the Admin Console. Administrators can manage these accounts using standard user management capabilities, including adding or removing users from the Users and Directory Users lists.
All administrative actions affecting automatically created accounts are recorded in the Audit Log, providing visibility into account lifecycle events and changes.
