Set up Azure Active Directory with Enhanced Authentication

IMPORTANT

The procedure described on this page applies only to organizations that are not yet onboarded to the Adobe Admin Console.

If your organization has been onboarded to the Adobe Admin Console, see Platform-based administration differences (Adobe Workfront/Adobe Business Platform).

When Adobe Workfront expects a different signature method for the SAML response, you need to change which parts of the SAML token are digitally signed by Azure Active Directory (AD).

Access requirements

You must have the following access to perform the steps in this article:

Adobe Workfront plan Any
Adobe Workfront license Plan
Access level configurations

You must be a Workfront administrator.

NOTE: If you still don't have access, ask your Workfront administrator if they set additional restrictions in your access level. For information on how a Workfront administrator can modify your access level, see Create or modify custom access levels.

Set up Azure Active Directory with Enhanced Authentication

  1. Open the Azure portal and sign in as a global administrator or co-administrator.

  2. Select All services at the top-left side of the navigation pane to open the Azure AD extension.

  3. Type

    Azure Active Directory
    

    in the filter search box, and then select Azure Active Directory.

  4. In the Azure AD navigation pane select Enterprise Applications.

  5. Click All Applications to view a list of your apps.

  6. If you don’t see Workfront, use the Filter control at the top of the All Applications List, set the Show option to All Applications.

  7. Select Workfront to configure Workfront for single sign-on.

  8. After Workfront loads, select Single sign-on in the Azure AD navigation pane.

  9. Under SAML Signing Certificate, click Show advanced certificate signing settings.

  10. In the Signing Option list select Sign SAML response.

  11. Workfront requires Sign SAML response.

The next time that you sign in to Workfront, Azure AD will sign the part of the SAML response that you selected.

On this page