Sign in to Adobe Learning Manager with OpenID Connect (OIDC)
Learn how OpenID Connect sign-in works in Adobe Learning Manager for learners, authors, and administrators. This article covers the experience, not implementation.
Understand OpenID Connect sign-in
OpenID Connect (OIDC) is a common sign-in method built on web standards. Many organizations use an identity provider (for example, Okta, Google Workspace, or Microsoft Entra ID) for employees and partners.
When your organization enables OIDC for Adobe Learning Manager:
- You sign in using your organization’s usual login page, not a password that applies only to Adobe Learning Manager, unless your organization chooses otherwise.
- After you authenticate, Adobe Learning Manager receives the information your organization allows (such as your email and profile attributes) and opens the right experience for you: Learner, Author, Administrator, or other roles your account supports.
OIDC is an alternative to other sign-in options your account may offer, such as Adobe ID or SAML based single sign-on (SSO). Your administrator decides which methods are available.
Why organizations choose OpenID Connect
Organizations often choose OIDC because:
- Users see the same corporate or cloud identity experience they use for other applications.
- Password policies, multi-factor authentication, and account lifecycle are managed in the identity provider, consistent with other enterprise apps.
- OIDC follows patterns similar to other modern sign-in flows from a user and IT perspective, without the heavier document exchange associated with some SAML-only setups.
Your experience is still: go to Learning Manager, sign in where your organization tells you, and land in the app.
What you see when you sign in
Open Adobe Learning Manager
You might use:
- The main Adobe Learning Manager URL for your environment
- A custom domain your organization configured, if applicable
- A link from an email, invitation, or self-registration page
- A bookmark or deep link to a specific course, catalog page, or resource
If your account uses OIDC, starting sign-in typically redirects your browser to your organization’s identity provider.
Sign in with your organization
On your identity provider’s page, enter your credentials and complete any extra steps your organization requires, such as multi-factor authentication. This step happens outside Adobe Learning Manager’s own login form when OIDC is the method in use. From your perspective, it feels like signing in to your company or school account. You might not see technical terms like OIDC or OAuth during this step.
Return to Adobe Learning Manager
After a successful sign-in, your browser returns you to Adobe Learning Manager. The product then:
- Recognizes you using the email and profile information your identity provider shares, according to your organization’s settings
- Applies your permissions in Adobe Learning Manager (Learner, Author, Administrator, Integration Administrator, and so on)
- Opens the appropriate app or area (for example, the learner experience compared with admin or author experiences), consistent with how Adobe Learning Manager assigns roles for your account
If something goes wrong (for example, your account is not provisioned or your organization blocks access), you might see an error or be unable to proceed. Contact your internal IT team or Adobe Learning Manager administrator.
Use other sign-in options with OpenID Connect
Adobe Learning Manager can support more than one sign-in method on an account (multiple SSO options). For example:
- Some users sign in with Adobe ID
- Others use SAML SSO
- Others use OIDC
Which options appear to you depends on how your account is configured. Enabling OIDC for your organization does not by itself remove other methods unless your administrators change that configuration.
Supported features and scenarios
The following behaviors are supported when your organization uses OIDC with Adobe Learning Manager, consistent with how other enterprise sign-in methods are expected to work.
Table 1. OIDC support in common scenarios
If a specific workflow does not work, the cause might be identity provider settings, account provisioning, or Adobe Learning Manager role assignment. Your administrator can verify.
How roles work after sign-in
Adobe Learning Manager determines what you can do from your account’s roles and permissions, not from the OIDC protocol itself. OIDC only establishes who you are to the satisfaction of your identity provider and what your organization shares with Adobe Learning Manager.
- Learners typically see training, catalogs, and learning plans.
- Authors may create or curate content.
- Administrators manage users, configuration, and reporting.
If you land in the wrong area or lack access you expect, ask your Adobe Learning Manager administrator to check your profile and group membership.
Troubleshooting for common issues
Table 2. Troubleshooting OIDC sign-in
What administrators should know
If you configure Adobe Learning Manager for your organization, OIDC is set up with your identity provider’s application registration: client identifiers, endpoints for authorization, tokens, user information, and the redirect URL that Adobe Learning Manager uses to complete sign-in. Those values come from your identity provider’s documentation. The settings must match between your identity provider and Learning Manager so users see a smooth redirect and return.
End users do not need to manage those values. They only need the correct Learning Manager URL (or custom domain) and, where applicable, invitation or self-registration links from your team.
Summary
- OIDC lets users sign in to Adobe Learning Manager through their organization’s standard identity provider, with a familiar redirect-and-return flow.
- After sign-in, Adobe Learning Manager uses email and shared attributes to identify the user and apply roles (Learner, Author, Administrator, and so on).
- Self-registration, multiple SSO options, attribute updates, first-time user provisioning, deep links, return path, custom domains, mobile, Publish to Adobe Learning Manager, and identifier-based matching are supported according to your account configuration.
- Other sign-in methods (such as Adobe ID or SAML) remain available when your administrators keep them enabled.