DocumentationWorkfrontWorkfront Guide

Update users for single sign-on

Last update: Mon Jan 22 2024 00:00:00 GMT+0000 (Coordinated Universal Time)

CREATED FOR:

  • Admin
IMPORTANT
The procedure described on this page applies only to organizations that are not yet onboarded to the Adobe Admin Console.
If your organization has been onboarded to the Adobe Admin Console, see Platform-based administration differences (Adobe Workfront/Adobe Business Platform).

When single sign-on (SSO) is enabled in your Adobe Workfront instance, your users can log into Workfront with their SSO credentials.

If you have an existing system that is already populated with users associated with SSO credentials, you can import the users’ IDs into Workfront by importing a comma-separated values (CSV) file into Workfront.

For more information about integrating Workfront with an SSO system, see Overview of single sign-on in Adobe Workfront.

Access requirements

You must have the following access to perform the steps in this article:

Adobe Workfront plan
Any
Adobe Workfront license

New: Standard

Or

Current: Plan

Access level configurations
You must be a Workfront administrator.

For more detail about the information in this table, see Access requirements in Workfront documentation.

SSO usernames

Depending on what SSO solution you use, the username in your SSO environment can be called any of the following:

  • SSO Username
  • Federation ID
  • Federation Username

Regardless of what the username is called in your SSO environment, the value of the field is stored in the SSO Username field, on the User object.

In order for your users to be able to use their SSO credentials to log in to Workfront, you must update their profile to include their SSO Username, in addition to their Workfront username.

As a Workfront administrator, you can bulk update the SSO Username field for your Workfront users by importing a list of usernames into Workfront. This list must:

  • Contain the Workfront User ID (GUID) as well as the corresponding SSO Username for each user
  • Be saved as a CSV or a TSV file.

This process either updates existing SSO Usernames in Workfront, or adds a new SSO Username, if one is missing for users.

Prepare the import file prepare-the-import-file

You can start preparing your import file by building a report of all users in Workfront that must have their SSO Username fields updated.

  1. Build a user report in Workfront.

    For instructions on building user reports in Workfront, see Create a custom report.

  2. Select the following fields in your report:

    table 0-row-2 1-row-2 2-row-2 3-row-2
    Field Explanation
    Name The full name of the Workfront user.
    ID The ID is the Workfront alphanumeric GUID.
    SSO Username Adding the SSO Username field to ensures that are no usernames you are overwriting with your import. This field should be blank for all users, if your users have not yet been updated for SSO.

  3. Save the report.

  4. Click Export at the top of the report and export the report to Excel.

  5. Open the exported Excel file, and add your SSO Usernames for each user in the report in the SSO Username column.

    note important
    IMPORTANT
    SSO usernames are case-sensitive.

  6. Delete all columns in the Excel file, except the ID and the SSO Username columns.

  7. Delete the column headers and ensure there are no blank rows at the top of the report.

    The file you are using for updating your Workfront users with the SSO usernames must contain just 2 columns, in this order:

    • The first column must display the Workfront user ID (the user GUID as found in Workfront).

    • The second column must contain the SSO Username, as it displays in your SSO system.

    • The columns must have no headers, and there must not be any empty rows at the top of the list of names.

  8. Save the report as a CSV or TSV file on your computer.

Update your users for SSO update-your-users-for-sso

The process of updating users for SSO either adds the SSO Username field to your Workfront users if one is not present, or updates the value in that field if there is a value already associated with the users.

  1. Click the Main Menu icon Main Menu in the upper-right corner of Adobe Workfront, or (if available), click the Main Menu icon Main Menu in the upper-left corner, then click Setup .

  2. Click, System then select Update Users For SSO.

  3. Click Choose File to browse for the file you prepared.

    For more information about how to prepare this file, see Prepare the import file.

  4. Select the file from where it is saved on your computer, then click Open.

    This inserts the SSO credentials to Workfront, enabling all users to log in to Workfront using their SSO credentials.

    The Only Allow <SSO Configuration> Authentication setting is enabled for all users included in the CSV. This ensures that users must log in through SSO.

Verify SSO against your users’ Workfront usernames

For instructions on building a user report containing SSO Username information, see Prepare the import file.

  1. Run a user report containing SSO Username information.

    Notice that the SSO Username column is populated for each user.

  2. Ensure that the values for the SSO Username column match the SSO Username on your SSO server.

  3. If the SSO Username column is blank, update your users’ SSO Usernames.

    For instructions on updating your users for SSO, see Update your users for SSO.

recommendation-more-help
5f00cc6b-2202-40d6-bcd0-3ee0c2316b43