The procedure described on this page applies only to organizations that are not yet onboarded to the Adobe Admin Console.
If your organization has been onboarded to the Adobe Admin Console, see Platform-based administration differences (Adobe Workfront/Adobe Business Platform).
As an Adobe Workfront administrator, you can configure security preferences for your Workfront system:
Changes that you make in the system preferences impact all users in your system, and their experience in Workfront.
We recommend that you configure your system security preferences during the Workfront implementation and only occasionally revisit them after that.
You must have the following access to perform the steps in this article:
| Adobe Workfront plan | Any |
| Adobe Workfront license | Plan |
| Access level configurations | You must be a Workfront administrator. NOTE: If you still don't have access, ask your Workfront administrator if they set additional restrictions in your access level. For information on how a Workfront administrator can modify your access level, see Create or modify custom access levels. |
Click the Main Menu icon
in the upper-right corner of Adobe Workfront, then click Setup
.
In the left panel, click System > Preferences.
In the Security section, select any of the following fields to establish the security settings for your organization:
| Allow embedding of Workfront in an iframe |
Lets you embed Workfront in an iframe. This option is disabled by default. IMPORTANT: Displaying a web-based application in an iframe makes the application susceptible to a click-jacking security vulnerability. |
| Allow SAML 2.0 authentication in Office 365 add-ins | Lets you embed Workfront in an iframe only for Office 365 add-ins when Workfront is integrated with a SAML 2.0 single sign-on solution. This option is enabled by default. NOTE: If you enable the option above, Allow embedding of Workfront in an iframe, the option Allow SAML 2.0 authentication in Office 365 add-ins is enabled and dimmed. |
| Enable the use of session information when creating External Page URLs | Allows users to use the Session ID information of a site when adding an External Page to a Dashboard. For more information about adding External Pages to a Dashboard, see Embed an external web page in a dashboard. |
| Let people use Workfront's mobile applications and the Workfront Outlook Add-In | Allows users to access the mobile apps (Workfront View for iPad and mobile phone apps) and the Workfront Outlook app. This option is enabled by default. For information about Workfront View, see Use Adobe Workfront View. For more information about the mobile apps, see Use the Adobe Workfront mobile app. For more information about the Outlook plugin, see Set up Adobe Workfront for Outlook. |
| Collaborate with people without Workfront accounts by using email addresses |
Allows Workfront users to share certain items with people without a Workfront account by including their email address instead of their name. Users can share the following items with external users by using their email address:
This option is enabled by default. Important: The External User access level is unavailable in your Workfront instance if this option is disabled. For more information, see Built-in access levels in Workfront. |
| Require external users to register with a password | Requires external users to register before they are able to view items in Workfront. By default, this option is disabled. When you enable this option, people without a Workfront account who are included in certain updates by their email address, will be prompted to create an account before they can view the item they are included on. This creates an External User account for them. This option is disabled by default. |
| Automatically log users out after | Lets you specify when a user is logged out of Workfront, after a period of inactivity. By default, users are logged out after 8 hours of inactivity. This option also affects Workfront customers who are using a single sign-on solution. |
| Automatically log mobile users out after | Lets you specify when a user is logged out of the Workfront application, after a period of inactivity. By default, users are logged out after 7 days of inactivity. This option also affects Workfront customers who are using a single sign-on solution. |
| Enable Zoom integration in the updates stream | Lets you enable or disable the Zoom integration in the Updates area for all users in the organization. Users can uninstall the Zoom integration in their personal instance of Workfront. For more information, see Uninstalling the Zoom integration. |
Click Save.
The changes that you saved here affect the experience of all the users in Workfront and anyone who interacts with them as an external user.