Identity and access management
Adobe Commerce as a Cloud Service leverages Adobe’s enterprise-grade identity infrastructure to ensure secure, scalable, and centralized access control across all environments. Identity and access management (IAM) in Adobe Commerce as a Cloud Service is designed to simplify user provisioning, enforce least-privilege access, and support compliance with global security standards.
-
Adobe Identity Management Services (IMS): Adobe Commerce as a Cloud Service uses Adobe Identity Management Services (IMS) to authenticate users and manage entitlements. This includes support for federated identity providers and role-based access control.
-
Admin console governance: Administrators manage access to the storefront and backend through the Adobe Admin Console. Permissions can be scoped to specific features and roles, ensuring least-privilege access.
Adobe Identity Management Services (IMS)
Adobe Commerce as a Cloud Service uses Adobe Identity Management Services (IMS) to authenticate users and manage entitlements across the platform. IMS provides:
- Federated identity support: Integrate with enterprise identity providers, such as Azure AD and Okta, using SAML or OIDC.
- Single Sign-On (SSO): Seamless access to Adobe Commerce and other Adobe Experience Cloud products.
- Multi-Factor Authentication (MFA): Enforced at the organization level for enhanced security.
- Global redundancy: Identity data is stored in multi-region, load-balanced cloud infrastructure.
Admin Console access control
The Adobe Admin Console is the central hub for managing user access to Adobe Commerce as a Cloud Service:
- Role-Based Access Control (RBAC): Assign granular permissions to users based on their roles, such as Developer, Admin, and Analyst.
- Product profiles: Define access scopes for different environments, such as staging and production.
- Delegated administration: System Admins and Product Admins can manage user access without IT involvement.
See user management for more information.
API authentication and integration security
Adobe Commerce as a Cloud Service’s REST API authentication is handled through Adobe’s Adobe Identity Management Services (IMS) using standardized OAuth 2 protocols. This authentication system supports both interactive user-based workflows and automated server-to-server integrations, ensuring secure and appropriate access for different use cases.
- OAuth 2.0 support: Secure token-based authentication for integrations and third-party services.
- Scoped API access: Limit API access to specific resources and operations.
- Audit logging: Track authentication events and access changes for compliance and troubleshooting.
See REST authentication for more information.