Renew the Adobe Workfront SAML 2.0 metadata certificate

Last update: August 20, 2024

CREATED FOR:

  • Admin
IMPORTANT
The procedure described on this page applies only to organizations that have not yet been onboarded to the Admin Console. If your organization has been onboarded to the Adobe Admin Console, no action is necessary.
For a list of procedures that differ based on whether your organization has been onboarded to the Adobe Admin Console, see Platform-based administration differences (Adobe Workfront/Adobe Business Platform).

The Adobe Workfront servers utilize the SAML 2.0 protocol for authentication and authorization. Once updated, the new certificate remains valid for one year. When it is time for you to renew the certificate on your identity provider, you receive a warning in Workfront alerting you that this change must occur. As a Workfront administrator, you can manage this change at the system level.

NOTE
This is not available if your organization’s Workfront instance is enabled with Adobe IMS. See your network or IT administrator if you need more information.

Access requirements

Expand to view access requirements for the functionality in this article.

You must have the following access to perform the steps in this article:

Adobe Workfront planAny
Adobe Workfront license

New: Standard

or

Current: Plan

Access level configurationsYou must be a Workfront administrator.

For more detail about the information in this table, see Access requirements in Workfront documentation.

Configure SAML 2.0 within Workfront

To review the warning message and acknowledge the update of the SAML 2.0 metadata in your identity provider:

  1. Click the Main Menu icon Main Menu in the upper-right corner of Adobe Workfront, or (if available), click the Main Menu icon Main Menu in the upper-left corner, then click Setup Setup icon .

  2. Click System > Single Sign-On.

  3. In the Type drop-down menu, select SAML 2.0.

  4. Click Download SAML 2.0 Metadata.

    This downloads the renewed Workfront certificate for SAML 2.0, which contains the correct metadata for your server.

  5. In your identity provider, copy your current Assertion Consumer Service (ACS) URL (also known as the Reply URL) to a safe place.

    CAUTION
    Before you upload the Workfront metadata to your Single Sign-On (SSO) provider in Step 6, copy your current Assertion Consumer Service (ACS) URL to a safe place. This URL, also known as the Reply URL, is found on your SSO provider’s Workfront configuration page.
    If the ACS URL changes after you upload the Workfront metadata, this means that the metadata might contain an incorrect ACS URL. You must change it back to the one you copied in order to avoid breaking your Single Sign-On connection. Your updated certificate will still be correct after you do this.

  6. In your identity provider server, update the new certificate you downloaded.

  7. (Conditional) If the Assertion Consumer Service (ACS) URL or Reply URL has changed in your identity provider, change it back to the URL you copied in Step 5.

  8. In Workfront, on the Single Sign-on (SSO) page, make sure that this option is selected: The new Workfront certificate has already been uploaded to the Identity Provider.

    NOTE
    • This option is visible only if all of the following apply:
    • Your organization is already set up for SAML 2.0
    • The current certificate is ready to expire
    • The new certificate is available
    • When this field is selected, Workfront administrators can log in to Workfront with their SSO credentials or their Workfront credentials.

  9. Click Save.

    The warning message no longer displays because you acknowledged the renewal of the SAML 2.0 certificate on the server of your identity provider.

  10. Click Test Connection to test your configuration.

    You should see a message confirming that the connection was successful.

For more information, or for assistance with the manual configuration of metadata, please contact our Support Team, as explained in Contact Customer Support.

More help on this topic

Previous pageRemoval of single sign-on options
Next pagePrevent duplicate users

Workfront


Learn: Automating Workflows with Workfront Fusion - Unique Use Cases in Action

Workfront

Tuesday, Mar 4, 6:00 PM UTC

Looking for creative ways to use Workfront Fusion to solve business challenges? Join Pan Shahbazian of Starbucks as she shares three unique use cases that can transform your workflows.

Register

The Perfect Blend: A New Era of Collaboration with AEM and Workfront

Adobe Customer Success Webinars

Wednesday, Apr 2, 5:00 PM UTC

Explore how Adobe Experience Manager and Workfront integrate to help teams move from ideation to delivery without the usual bottlenecks, ensuring content is organized, on-brand, and ready to go live faster.

Register

Connect with Experience League at Summit!

Get front-row access to top sessions, hands-on activities, and networking—wherever you are!

Learn more

Register to learn something new

WORKFRONT

Join Adobe product experts in live events where you will learn Adobe Workfront best practices, tips and tricks, and hear about the latest product features and updates.

Register

Register now