Update users for single sign-on

Last update: February 7, 2025

CREATED FOR:

  • Admin
IMPORTANT
The procedure described on this page applies only to organizations that are not yet onboarded to the Adobe Admin Console.
If your organization has been onboarded to the Adobe Admin Console, see Platform-based administration differences (Adobe Workfront/Adobe Business Platform).

When single sign-on (SSO) is enabled in your Adobe Workfront instance, your users can log into Workfront with their SSO credentials.

If you have an existing system that is already populated with users associated with SSO credentials, you can import the users’ IDs into Workfront by importing a comma-separated values (CSV) file into Workfront.

For more information about integrating Workfront with an SSO system, see Overview of single sign-on in Adobe Workfront.

Access requirements

Expand to view access requirements for the functionality in this article.

You must have the following access to perform the steps in this article:

Adobe Workfront planAny
Adobe Workfront license

New: Standard

Or

Current: Plan

Access level configurationsYou must be a Workfront administrator.

For more detail about the information in this table, see Access requirements in Workfront documentation.

SSO usernames

Depending on what SSO solution you use, the username in your SSO environment can be called any of the following:

  • SSO Username
  • Federation ID
  • Federation Username

Regardless of what the username is called in your SSO environment, the value of the field is stored in the SSO Username field, on the User object.

In order for your users to be able to use their SSO credentials to log in to Workfront, you must update their profile to include their SSO Username, in addition to their Workfront username.

As a Workfront administrator, you can bulk update the SSO Username field for your Workfront users by importing a list of usernames into Workfront. This list must:

  • Contain the Workfront User ID (GUID) as well as the corresponding SSO Username for each user
  • Be saved as a CSV or a TSV file.

This process either updates existing SSO Usernames in Workfront, or adds a new SSO Username, if one is missing for users.

Prepare the import file

You can start preparing your import file by building a report of all users in Workfront that must have their SSO Username fields updated.

  1. Build a user report in Workfront.

    For instructions on building user reports in Workfront, see Create a custom report.

  2. Select the following fields in your report:

    FieldExplanation
    NameThe full name of the Workfront user.
    IDThe ID is the Workfront alphanumeric GUID.
    SSO UsernameAdding the SSO Username field to ensures that are no usernames you are overwriting with your import. This field should be blank for all users, if your users have not yet been updated for SSO.

    Users with SSO username but no access

  3. Save the report.

  4. Click Export at the top of the report and export the report to Excel.

  5. Open the exported Excel file, and add your SSO Usernames for each user in the report in the SSO Username column.

    IMPORTANT
    SSO usernames are case-sensitive.

  6. Delete all columns in the Excel file, except the ID and the SSO Username columns.

  7. Delete the column headers and ensure there are no blank rows at the top of the report.

    The file you are using for updating your Workfront users with the SSO usernames must contain just 2 columns, in this order:

    • The first column must display the Workfront user ID (the user GUID as found in Workfront).

    • The second column must contain the SSO Username, as it displays in your SSO system.

    • The columns must have no headers, and there must not be any empty rows at the top of the list of names.

      Update users CSV

  8. Save the report as a CSV or TSV file on your computer.

Update your users for SSO

The process of updating users for SSO either adds the SSO Username field to your Workfront users if one is not present, or updates the value in that field if there is a value already associated with the users.

  1. Click the Main Menu icon Main Menu in the upper-right corner of Adobe Workfront, or (if available), click the Main Menu icon Main Menu in the upper-left corner, then click Setup Setup icon .

  2. Click System, then select Update Users For SSO.

  3. Click Choose File to browse for the file you prepared.

    For more information about how to prepare this file, see Prepare the import file.

  4. Select the file from where it is saved on your computer, then click Open.

    This inserts the SSO credentials to Workfront, enabling all users to log in to Workfront using their SSO credentials.

    The Only Allow <SSO Configuration> Authentication setting is enabled for all users included in the CSV. This ensures that users must log in through SSO.

Verify SSO against your users’ Workfront usernames

For instructions on building a user report containing SSO Username information, see Prepare the import file.

  1. Run a user report containing SSO Username information.

    Notice that the SSO Username column is populated for each user.

  2. Ensure that the values for the SSO Username column match the SSO Username on your SSO server.

  3. If the SSO Username column is blank, update your users’ SSO Usernames.

    Users with SSO field

    For instructions on updating your users for SSO, see Update your users for SSO.

More help on this topic

Previous pageOverview of single sign-on
Next pageConfigure Workfront with SAML 2.0

Workfront


Learn: Automating Workflows with Workfront Fusion - Unique Use Cases in Action

Workfront

Tuesday, Mar 4, 6:00 PM UTC

Looking for creative ways to use Workfront Fusion to solve business challenges? Join Pan Shahbazian of Starbucks as she shares three unique use cases that can transform your workflows.

Register

The Perfect Blend: A New Era of Collaboration with AEM and Workfront

Adobe Customer Success Webinars

Wednesday, Apr 2, 5:00 PM UTC

Explore how Adobe Experience Manager and Workfront integrate to help teams move from ideation to delivery without the usual bottlenecks, ensuring content is organized, on-brand, and ready to go live faster.

Register

3 Pillars of Purpose-driven Experiences: Trust, Data, and GenAI

In-person | Session | General Audience

Learn how leading B2B and B2C brands like AT&T and IBM are intersecting data, GenAI and trust to build “purpose-driven” experiences that...

Wed, Mar 19, 1:00 PM PDT (8:00 PM UTC)

Register

How Adobe Uses GenStudio to Supercharge Its Global Marketing Organization

In-person | Session | General Audience

Get an inside look at how Adobe’s global marketing organization is using Adobe GenStudio to build a world-class content supply chain....

Tue, Mar 18, 4:00 PM PDT (11:00 PM UTC)

Register

Connect with Experience League at Summit!

Get front-row access to top sessions, hands-on activities, and networking—wherever you are!

Learn more

Register now

Register to learn something new

WORKFRONT

Join Adobe product experts in live events where you will learn Adobe Workfront best practices, tips and tricks, and hear about the latest product features and updates.

Register