Update users for single sign-on

Last update: February 7, 2025

CREATED FOR:

  • Admin
IMPORTANT
The procedure described on this page applies only to organizations that are not yet onboarded to the Adobe Admin Console.
If your organization has been onboarded to the Adobe Admin Console, see Platform-based administration differences (Adobe Workfront/Adobe Business Platform).

When single sign-on (SSO) is enabled in your Adobe Workfront instance, your users can log into Workfront with their SSO credentials.

If you have an existing system that is already populated with users associated with SSO credentials, you can import the users’ IDs into Workfront by importing a comma-separated values (CSV) file into Workfront.

For more information about integrating Workfront with an SSO system, see Overview of single sign-on in Adobe Workfront.

Access requirements

Expand to view access requirements for the functionality in this article.

You must have the following access to perform the steps in this article:

Adobe Workfront planAny
Adobe Workfront license

New: Standard

Or

Current: Plan

Access level configurationsYou must be a Workfront administrator.

For more detail about the information in this table, see Access requirements in Workfront documentation.

SSO usernames

Depending on what SSO solution you use, the username in your SSO environment can be called any of the following:

  • SSO Username
  • Federation ID
  • Federation Username

Regardless of what the username is called in your SSO environment, the value of the field is stored in the SSO Username field, on the User object.

In order for your users to be able to use their SSO credentials to log in to Workfront, you must update their profile to include their SSO Username, in addition to their Workfront username.

As a Workfront administrator, you can bulk update the SSO Username field for your Workfront users by importing a list of usernames into Workfront. This list must:

  • Contain the Workfront User ID (GUID) as well as the corresponding SSO Username for each user
  • Be saved as a CSV or a TSV file.

This process either updates existing SSO Usernames in Workfront, or adds a new SSO Username, if one is missing for users.

Prepare the import file

You can start preparing your import file by building a report of all users in Workfront that must have their SSO Username fields updated.

  1. Build a user report in Workfront.

    For instructions on building user reports in Workfront, see Create a custom report.

  2. Select the following fields in your report:

    FieldExplanation
    NameThe full name of the Workfront user.
    IDThe ID is the Workfront alphanumeric GUID.
    SSO UsernameAdding the SSO Username field to ensures that are no usernames you are overwriting with your import. This field should be blank for all users, if your users have not yet been updated for SSO.

    Users with SSO username but no access

  3. Save the report.

  4. Click Export at the top of the report and export the report to Excel.

  5. Open the exported Excel file, and add your SSO Usernames for each user in the report in the SSO Username column.

    IMPORTANT
    SSO usernames are case-sensitive.

  6. Delete all columns in the Excel file, except the ID and the SSO Username columns.

  7. Delete the column headers and ensure there are no blank rows at the top of the report.

    The file you are using for updating your Workfront users with the SSO usernames must contain just 2 columns, in this order:

    • The first column must display the Workfront user ID (the user GUID as found in Workfront).

    • The second column must contain the SSO Username, as it displays in your SSO system.

    • The columns must have no headers, and there must not be any empty rows at the top of the list of names.

      Update users CSV

  8. Save the report as a CSV or TSV file on your computer.