Using creative cloud apps without logging into adobe

[Foresthippy]

Hi,

 

We use several creative cloud apps in school, animate, photoshop, acrobat. We are finding that to use the app, students have to have an adobe account and login each time they use the app. If this worked as it should everything would be fine, but for whatever reason, students are coming unstuck and getting their accounts suspended. This is killing T & L. Is there any way to install these apps as you would just about anything else, without the need for pupils to login?

 

Cheers,

John

[kennysarmy]

https://helpx.adobe.com/uk/enterprise/using/licensing.html

 

Would you not need Shared Device Licencing instead of Named?

[Warwick_Tech]

https://helpx.adobe.com/uk/enterprise/using/licensing.html

 

Would you not need Shared Device Licencing instead of Named?

 

+1

 

Shared device licencing and then link Azure AD (if you have it) to their 'federated ID's' - It does mean giving Adobe full access to Azure by an admin

[Cw2k]

+1

 

Shared device licencing and then link Azure AD (if you have it) to their 'federated ID's' - It does mean giving Adobe full access to Azure by an admin

 

But still no support for pass through authentication so users still have to enter their email to trigger sso

[free780]

Or they can just enter your organisations domain which matches the one in the users UPN. As long as you have SSO with HAADJ devices.

[Warwick_Tech]

But still no support for pass through authentication so users still have to enter their email to trigger sso

 

The more they type it, the more likely they are to remember what it is when asked for it!

 

Passwords on the other hand...

[JasonNVSD]

Shared device licencing and then link Azure AD (if you have it) to their 'federated ID's' - It does mean giving Adobe full access to Azure by an admin

With SDL and Federated IDs, is it required to sync your users to the Adobe Admin Console?

[Warwick_Tech]

I believe so, yes - I added the app as a trusted app in Azure then added everyone via distribution groups (it's smart enough to dynamically update so you don't need to keep updating the user list, as long as they are in the distribution group)

 

To be honest, I actually quite like Azure SSO apps

[PaulPierce8]

Not sure if this will help with the other Adobe products, however when i had an issue with Acrobat constantly asking to sign in i made the following change in regedit to resolve it;

 

Open run box (WIN +R)> type regedit.

Go to location [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Adobe\Adobe Acrobat\DC\Activation]

Right click and select New and Click on DWORD (32-bit) value

Name It "IsAMTEnforced" and give the dword value “1”.

You also have to delete IsNGLEnforced from the same location. If you see this file there.

[MYK-IT]

Sorry to jump in on this thread @jdmackay, but we are contemplating moving over to Adobe Creative Cloud to replace a vast array of legacy / old software used within the school and hoped that those who use it within schools may be able to assist?

 

We have been supplied quotations for Creative Cloud (All Apps, Named Licensing) and although I'm still learning more about the product, I was hoping that licences could be associated with Office365/Azure AD, and with having AAD Connect utilise SSO.

 

In respect of the software itself, I am lead to believe that we can deploy / install it on all workstations, and the software is activated as/when a licenced user logs in (and uses the software)? Is that correct? Does this work for a shared device environment ok? (as shared-device licencing is well more expensive, plus there are some Apps that you don't get with shared-device licencing).

 

Finally, what element of Adobe Creative Cloud is cloud-based then? Just attempting to understand which software does/not need to be installed locally etc?

 

Many thanks,

[free780]

Sorry to jump in on this thread @jdmackay, but we are contemplating moving over to Adobe Creative Cloud to replace a vast array of legacy / old software used within the school and hoped that those who use it within schools may be able to assist?

 

We have been supplied quotations for Creative Cloud (All Apps, Named Licensing) and although I'm still learning more about the product, I was hoping that licences could be associated with Office365/Azure AD, and with having AAD Connect utilise SSO.

 

In respect of the software itself, I am lead to believe that we can deploy / install it on all workstations, and the software is activated as/when a licenced user logs in (and uses the software)? Is that correct? Does this work for a shared device environment ok? (as shared-device licencing is well more expensive, plus there are some Apps that you don't get with shared-device licencing).

 

Finally, what element of Adobe Creative Cloud is cloud-based then? Just attempting to understand which software does/not need to be installed locally etc?

 

Many thanks,

 

So its really for licensing unless you allow your users to use the storage. There is a cloud connector. The end game is 1:1 devices not shared devices for Adobe.

 

You can get it to the point of users having to enter your domain in the username box and SSO can take care of the rest. Its not as seamless as MS Office.

 

Set up SSO with Azure AD Connector (adobe.com)

[MYK-IT]

Hi,

 

Just to continue from my post a while back, I just wanted to check and get some confirmation from those that currently use Adobe Creative Cloud etc.

 

- Based on "amount of computers" vs "amount of students" and their corresponding licencing costs - it would be more cost effective for us to go with the "Named User Licence" model on the basis we can still get this to work on shared-devices ok?

 

- As mentioned by others, you can slimline (but not totally eradicate) the signing in process? e.g. Azure AD / SSO? We have Microsoft A3 so can make use of dynamic groups, so don't need to imports all end-user accounts into Adobe portal, just the groups? Is that correct?

 

- In respect of the software, and installation - what file size are we looking at? And how are you installing it via MSI (GPO, PDQ, Intune etc) - Just thinking many computers still have 128GB SSD. Are any elements cloud-based?

 

Sorry for many questions, as although I have been supplied various quotations, it appears that no trials are available (to either allow me to test deployment, or check compatibility with existing hardware) and it is a lot of money to shell out.

 

Thanks,

[slugshead]

We're moving from shared device licenses to the named ones. 85 shared to 500 named at a grand cheaper.

 

Going to put all the apps as available in SCCM so users can pull it if they want and use the Azure AD for signing on.

[MYK-IT]

Enterprise Device Authentication Management for Creative Cloud Desktop Applications and Acrobat Pro

 

https://helpx.adobe.com/enterprise/using/enterprise-device-authentication-management.html

 

 

Last updated on Dec 13, 2022

 

Applies to:

 

Persona: System Administrator

OS: macOS and Windows

Device: Company-owned desktop machines

Surface: Latest Version of Creative Cloud & Acrobat Pro desktop applications

 

Currently does not support:

Web services (such as Adobe Sign, Adobe Assets, Adobe Libraries)

Mobile Applications

Acrobat Reader

Dreamweaver

 

Overview

Enterprise level configuration setting enables organizations to configure the authentication mechanism for Creative Cloud Desktop Applications including Acrobat Pro Desktop. The feature is intended to be combined with the company’s device deployment mechanism. Using this configuration, you can ensure that when your users sign in, they are automatically re-directed to the companies’ IDP with the claimed domain.

 

Note:

To enable this functionality, a company will need to claim the domain on the Adobe Admin Console. Also, a company may claim multiple domains, but a policy must resolve to a single claimed domain on a given machine. If you have claimed multiple domains, you may choose to redirect different users to different domains.

 

Benefits of customizing authentication choices

Configuring your organization's authentication settings can benefit you in the following ways:

 

Automatically redirect users to companies’ identity provider at app launch for domains claimed in the Admin Console

 

Restrict sign-in with Organizational IDs only

 

Remove Social Sign-In options from the Authentication screen

 

Configure device for Enterprise Device Authentication Management

To configure Enterprise Device Authentication Management for a device in your organization perform the following steps (based on the OS of the device)

macOS

 

Create a plist file that specifies the claimed domain to which the user is redirected.

AuthInfo

login_domain

@

Place the plist file in the following location on the device:

 

/Library/Preferences/com.adobe.NGL.AuthInfo.plist

Restart the Creative Cloud desktop app.

 

To do this, we recommend that you restart the device.

 

Windows

Open Windows Registry Editor.

Press Windows + R, type regedit and press Enter.

Navigate to the following location:

 

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\

Add a key – NGL.

Within NGL, add another key – AuthInfo.

Within AuthInfo, create a string value:

Name: login_domain

Value: The name the claimed domain to which the user is redirected.

Windows registry value

Restart the Creative Cloud desktop app.

 

To do this, we recommend that you restart the device.

 

Known issue

After you have configured a device, if a user signs out of the Creative Cloud desktop app, the user is unable to close the Sign-in modal.

 

Resolution

Adobe will release a fix for this issue in the next release of the Creative Cloud desktop app. For now, you can close the app, by choosing File > Close.

[Cw2k]

Enterprise Device Authentication Management for Creative Cloud Desktop Applications and Acrobat Pro

 

https://helpx.adobe.com/enterprise/using/enterprise-device-authentication-management.html

 

Still requires you to sign in, just forces you to the idp signin page rather than giving the option to sign in to other account types.

[MYK-IT]

Still requires you to sign in, just forces you to the idp signin page rather than giving the option to sign in to other account types.

 

Ahh, that's not good / what I was hoping for!