Update users for single sign-on
When single sign-on (SSO) is enabled in your Adobe Workfront instance, your users can log into Workfront with their SSO credentials.
If you have an existing system that is already populated with users associated with SSO credentials, you can import the users’ IDs into Workfront by importing a comma-separated values (CSV) file into Workfront.
For more information about integrating Workfront with an SSO system, see Overview of single sign-on in Adobe Workfront.
Access requirements
You must have the following access to perform the steps in this article:
| table 0-row-2 1-row-2 2-row-2 layout-auto html-authored no-header | |
|---|---|
| Adobe Workfront plan | Any |
| Adobe Workfront license |
New: Standard Or Current: Plan |
| Access level configurations | You must be a Workfront administrator. |
For more detail about the information in this table, see Access requirements in Workfront documentation.
SSO usernames
Depending on what SSO solution you use, the username in your SSO environment can be called any of the following:
- SSO Username
- Federation ID
- Federation Username
Regardless of what the username is called in your SSO environment, the value of the field is stored in the SSO Username field, on the User object.
In order for your users to be able to use their SSO credentials to log in to Workfront, you must update their profile to include their SSO Username, in addition to their Workfront username.
As a Workfront administrator, you can bulk update the SSO Username field for your Workfront users by importing a list of usernames into Workfront. This list must:
- Contain the Workfront User ID (GUID) as well as the corresponding SSO Username for each user
- Be saved as a CSV or a TSV file.
This process either updates existing SSO Usernames in Workfront, or adds a new SSO Username, if one is missing for users.
Prepare the import file prepare-the-import-file
You can start preparing your import file by building a report of all users in Workfront that must have their SSO Username fields updated.
-
Build a user report in Workfront.
For instructions on building user reports in Workfront, see Create a custom report.
-
Select the following fields in your report:
table 0-row-2 1-row-2 2-row-2 3-row-2 Field Explanation Name The full name of the Workfront user. ID The ID is the Workfront alphanumeric GUID. SSO Username Adding the SSO Username field to ensures that are no usernames you are overwriting with your import. This field should be blank for all users, if your users have not yet been updated for SSO. 
-
Save the report.
-
Click Export at the top of the report and export the report to Excel.
-
Open the exported Excel file, and add your SSO Usernames for each user in the report in the SSO Username column.
note important IMPORTANT SSO usernames are case-sensitive. -
Delete all columns in the Excel file, except the ID and the SSO Username columns.
-
Delete the column headers and ensure there are no blank rows at the top of the report.
The file you are using for updating your Workfront users with the SSO usernames must contain just 2 columns, in this order:
-
The first column must display the Workfront user ID (the user GUID as found in Workfront).
-
The second column must contain the SSO Username, as it displays in your SSO system.
-
The columns must have no headers, and there must not be any empty rows at the top of the list of names.
-
-
Save the report as a CSV or TSV file on your computer.
Update your users for SSO update-your-users-for-sso
The process of updating users for SSO either adds the SSO Username field to your Workfront users if one is not present, or updates the value in that field if there is a value already associated with the users.
-
Click the Main Menu icon
-
Click System, then select Update Users For SSO.
-
Click Choose File to browse for the file you prepared.
For more information about how to prepare this file, see Prepare the import file.
-
Select the file from where it is saved on your computer, then click Open.
This inserts the SSO credentials to Workfront, enabling all users to log in to Workfront using their SSO credentials.
The Only Allow
<SSO Configuration>Authentication setting is enabled for all users included in the CSV. This ensures that users must log in through SSO.
Verify SSO against your users’ Workfront usernames
For instructions on building a user report containing SSO Username information, see Prepare the import file.
-
Run a user report containing SSO Username information.
Notice that the SSO Username column is populated for each user.
-
Ensure that the values for the SSO Username column match the SSO Username on your SSO server.
-
If the SSO Username column is blank, update your users’ SSO Usernames.
For instructions on updating your users for SSO, see Update your users for SSO.