On the Okta dashboard, navigate to Applications > Add Application, and click Create New App.
Last updated on
Dec 16, 2024
Set up single sign-on between Okta and Adobe Admin Console using SAML.
The Adobe Admin Console allows a system administrator to configure domains that are used for login via Federated ID for Single Sign-On (SSO). Once the domain is verified, the directory containing the domain is configured to allow users to log in to Creative Cloud. Users can log in using email addresses within that domain via an Identity Provider (IdP). The process is provisioned either as a software service, which runs within the company network and is accessible from the Internet, or a cloud service hosted by a third party that allows for the verification of user login details via secure communication using the SAML protocol.
One such IdP is Okta, a cloud service that facilitates secure identity management.
Configure Okta
Before you begin, create a Federated ID directory, selecting Other SAML Providers as the identity provider. Copy the values for ACS URL and Entity ID from the Add SAML Profile screen.
Ensure that you have an Okta dashboard configured and accessible with administrative rights for the domain in question.
Fill-out the general settings as below, and click Next.
- App name: Adobe Creative Cloud
- App visibility:
- Select Do not display application icon to users.
- Select Do not display application icon in the Okta Mobile app.
Click Show Advanced Settings.
Modify the Attribute Statements as follows:
- FirstName = user.firstName
- LastName = user.lastName
- Email = user.email
Enter the Entity ID and ACS URL copied from the Adobe Admin Console.
Click Finish and access the newly created Adobe Creative Cloud app.
Download the metadata file from the Okta Dashboard to upload to the Adobe Admin Console.
Upload IdP metadata file to Adobe Admin Console
To update the latest certificate to the Adobe Admin Console, return to the Adobe Admin Console. Upload the certificate downloaded from Okta, to the Add SAML profile screen and click Done.
Test your setup
Check the user access for a user whom you have defined in your own identity management system and in the Adobe Admin Console, by logging in to the Adobe website or the Creative Cloud desktop app.
If you encounter problems, see our troubleshooting document.
If you need assistance with your single sign-on configuration, navigate to Adobe Admin Console > Support to contact Adobe Customer Care.
