Update users for single sign-on

IMPORTANT

The procedure described on this page applies only to organizations that are not yet onboarded to the Adobe Admin Console.

If your organization has been onboarded to the Adobe Admin Console, see Platform-based administration differences (Adobe Workfront/Adobe Business Platform).

When single sign-on (SSO) is enabled in your Adobe Workfront instance, you can log into Workfront with your SSO credentials.

If you have an existing system that is already populated with users associated with SSO credentials, you can import the users’ IDs into Workfront by importing a comma-separated values (CSV) file into Workfront.

For more information about integrating Workfront with an SSO system, see Overview of single sign-on in Adobe Workfront.

Access requirements

You must have the following access to perform the steps in this article:

Adobe Workfront plan Any
Adobe Workfront license Plan
Access level configurations

You must be a Workfront administrator.

NOTE: If you still don't have access, ask your Workfront administrator if they set additional restrictions in your access level. For information on how a Workfront administrator can modify your access level, see Create or modify custom access levels.

SSO usernames

Depending on what SSO solution you use, the username in your SSO environment can be called any of the following:

  • SSO Username
  • Federation ID
  • Federation Username
  • LDAP Username
  • AD Username
  • Active Directory Username

In Workfront, all these names are stored in the SSO Username field, on the user object.

In order for your users to be able to use their SSO credentials to log in to Workfront, you must update their profile to include their SSO Username, in addition to their Workfront username.

As a Workfront administrator, you can bulk update the SSO Username field for your Workfront users by using a list of usernames and importing it in Workfront. This list must contain the Workfront User ID (GUID) as well as the corresponding SSO Username for each user and it must be saved as a CSV or a TSV file. This process either updates existing SSO Usernames in Workfront, or adds a new SSO Username, if one is missing for users.

Prepare the import file

You can start preparing your import file by building a report of all users in Workfront that must have their SSO Username fields updated.

  1. Build a user report in Workfront.

    For instructions on building user reports in Workfront, see Create a custom report.

  2. Select the following fields in your report:

    Name The full name of the Workfront user.
    ID The ID is the Workfront alphanumeric GUID.
    SSO Username Select the SSO Username field to ensure there are no usernames you are overwriting with your import. This field should be blank for all users, if your users have not yet been updated for SSO.

  3. Save the report.

  4. Click Export at the top of the report and export the report to Excel.

  5. Open the exported Excel file, and start adding your SSO Usernames for each user in the report in the SSO Username column.

    IMPORTANT

    SSO usernames are case-sensitive.

  6. Eliminate all columns in the Excel file, except for the ID and the SSO Username columns.

  7. Eliminate the column headers and ensure there are no blank rows at the top of the report.

    The file you are using for updating your Workfront users with the SSO usernames must contain just 2 columns, in this order:

    • The first column should display the Workfront user ID (the user GUID as found in Workfront).

    • The second column should contain the SSO Username, as it displays in your SSO system.

    • The columns should have no headers, and there should not be any empty rows at the top of the list of names.

  8. Save the report as a CSV or TSV file on your computer.

Update your users for SSO

The process of updating users for SSO either adds the SSO Username field to your Workfront users if one is not present, or updates the value in that field if there is a value already associated with the users.

  1. Click the Main Menu icon in the upper-right corner of Adobe Workfront, then click Setup .

  2. Click System then Update Users For SSO.

  3. Click Choose File to browse for the file you prepared.

    For more information about how to prepare this file, see Prepare the import file.

  4. Select the file where it is saved on your computer, then click Open.

    This enables all users to log in to Workfront using their SSO credentials.

    The Only Allow <SSO Configuration> Authentication setting is enabled for all users included in the CSV.

Verify SSO your users’ Workfront usernames

For instructions on building a user report containing SSO Username information, see Prepare the import file.

  1. Run a user report containing SSO Username information.

    Notice that the SSO Username column is populated for each user.

  2. Ensure that the values for the SSO Username column match the SSO Username on your SSO server.

  3. If the SSO Username column is blank, update your users’ SSO Usernames.

    For instructions on updating your users for SSO, see Update your users for SSO.

On this page