Tutorial · Adobe administration · Intermediate

Adobe Admin Console with Microsoft Entra ID: SSO and automatic user provisioning

Let staff sign in to Adobe apps with their Microsoft work account and assign Adobe licences through Entra ID groups.

LevelIntermediate
Time1–2 hours
TopicAdobe administration

You'll need

  • Adobe Admin Console system admin
  • Entra ID Global or Application Administrator
  • Your email domain(s)

1. Claim the domain

  1. In Admin Console → Settings → Identity, create a Federated ID directory (or Business ID per Adobe's current guidance) and add your domain.
  2. Verify the domain with a DNS TXT record.

2. Configure SSO

  1. Choose Azure (Microsoft Entra ID) OIDC as the identity provider and follow the consent prompt.
  2. Test sign-in with a pilot user.

3. Automate users

Use Entra ID's Adobe Identity Management (SCIM) enterprise app or the Adobe User Sync Tool to sync users and groups. Map Entra security groups to Admin Console product profiles (e.g. Lic-Acrobat-Pro → Acrobat Pro profile).

4. Licence by group

Adding a user to the group assigns the licence; removing them frees the seat. This is what makes the request and offboarding flows possible.

Tips

  • Move existing Adobe IDs to the new directory carefully — plan the user content migration before switching.