Adobe Admin Console
Setting up identity and users from Microsoft
Azure and Google
PROJECT INFO
Oct 2018 - May 2019
Adobe Design
San Francisco, CA
TEAMMATES
1 UX Designer
2 Product Managers
5 Engineers
MY ROLE
Led the design and closely collaborated with 2 PMs, 4 engineers, and multiple stakeholders.
SET UP IDENTITY FOR ADOBE ADMIN CONSOLE
Integration with Microsoft Azure and Google
For Adobe’s enterprise customers, the users are managed in the Adobe Admin Console. The Azure Sync / Google Sync connects the Azure portal / Google Admin Console to the Adobe Admin Console and simplifies the identity setup process. With Azure / Google connector, the admin can automate the user sync and license provisioning workflows and set up SSO in a few minutes.






DESIGN PROCESS
Iterations among designers, PMs, and engineers
Adobe Design process is an iterative framework from research to concept and implementation. Design plays an important role in this project as it helps define the requirements with user research and customer feedback. User validation and close collaboration with engineers ensured the experience implemented as expected.


WHAT IS ADOBE ADMIN CONSOLE
Cross-Cloud Business Administration Experience
The Adobe Admin Console provides a central location for IT admins to configure and manage Adobe products and services ( including Creative Cloud, Document Cloud, and Experience Cloud) across their entire organization. The console enables enterprise and SMB IT admins to empower their end-users and organizations.


WHY GOOGLE AND AZURE
Leveraging the top cloud identity platforms for Adobe
Google Identity Platform and Microsoft Active Directory are the top two Identity and Access Management products on the market. About 70% of US K-12 schools (100,000 schools) leverage Google’s G-Suite with Google Cloud Identity. Adobe enterprise customers spend an immense amount of time, effort, and resources setting up their domain, identity, and user management infrastructure with Azure and Google.
Customers would love to leverage the work they put in to configure Azure and Google to help expedite the rollout of Adobe software.




MICROSOFT AZURE AD
Azure Active Directory (Azure AD) is Microsoft’s cloud-based identity and access management service. Azure AD helps end-users sign in and access resources in thousands of SaaS applications.


GOOGLE CLOUD IDENTITY
Google Identity Platform is a customer identity and access management (CIAM) platform that helps organizations add identity and access management functionality to their applications and protect user accounts.
UNDERSTAND THE USER
"Adobe software is hard to set up and manage."
By interviewing 8 enterprise customers and 10 schools, we learned that Adobe Enterprise/Federated ID setup and large Name User Deployment are complicated and cumbersome. Less than 1 in 10 schools completed deployment. Complexity and time claiming domains, setting up SSO, and importing users into the Admin Console are primary barriers for our enterprise and K-12 education customers to adopt Federated ID and enable access to Adobe products.
“Adobe is the hardest software to access. There are times teachers come to tell me they need some Adobe product a week later. I was like 'My gosh, not possible with Adobe software. I don't feel Adobe is focusing on Education, hopefully, things will start to change from Spark.”
- Education Customer
“I’m very, very familiar with what most of my K-12 collogues would be familiar with, which would be Google SAML apps sync. More than 50% of school districts in the country are using Google and the primary way of syncing is a tool called Google apps sync tool.”
- A nation top school district
WHAT IS THE PROBLEM
Today, setting up identity and users take 6+ weeks
The problem of the current process is that establishing domain ownership and directory federation, along with automation of user account creation and licensing provisioning, can take an organization 6+ weeks to finalize. With the Microsoft/Google sync connector, the time to solution is reduced to 30mins, simplifying the setup process and more quickly enabling enterprise end-users to access Adobe products.


MICROSOFT AZURE SYNC WORKFLOW
Setting up identity in a quick 3-step workflow
The strategy and workflow are to offer customers two setup options, a quick and a custom setup. The quick setup is a streamlined 3-step setup workflow and the custom setup is for setting up and configuring privacy controls to meet the need of large enterprise customers with strict IT policy.


GOOGLE SYNC WORKFLOW
Setting up identity integration in 30 mins
Consistent with Microsoft Azure sync, Google sync provides a direct connection from Google directory (GSuite or Google Classroom) to Adobe Admin Console. The federated environment sync can be established in one simple workflow in as little as 30 minutes


EXPERIENCE
2 Phased releases iterate and improve the experience
Phase 1 offers an Azure and Google User Sync feature to enable customers to set up Federation (SSO), claim domains, and sync user-groups in a 3-step wizard workflow. Phase 2 enables Azure and Google Sync with SCIM technology, which provides the privacy controls enterprise customers need.
USER TESTING
8 Enterprise Customers + 10 School Districts
Overall, there was a great amount of excitement and anticipation for the product they thought it was faster and easier than their current solution. While more information was desired, particularly at the beginning of the process (e.g. an overview of the process), customer expectations were mostly accurate including anticipated the structure and flow of the process.
" We’re all in with Azure. We’d love to get onboard with this. I wish I would have had it when we set up our current user sync.”
-- Enterprise Customer
" The Google sync looks like exactly what we’re looking for. If at all possible, I’d like to not even bother with the user sync tool."
-- Education Customer
THE IMPACT
5.5 Million Users Synced
Since Microsoft Azure Sync and Google Sync released in July 2019, till Dec 2020, 6927 customers adopted Microsoft Azure Sync, and 4463 customers adopted Google Sync in Adobe Admin Console.
Setup time for federation identity is reduced from 6+ weeks to 30 mins.
Over 5.5 million users are synced and over 3 million user licenses deployed through Microsoft Azure and Google sync.
48% decrease in support tickets related to directory sync.






Developer experience
Enabling admins to add and manage developers inside Admin Console. It enables the developer's ecosystem to create APIs for Adobe products.


Storage management
Enabling the admins to manage storage usage (user storage and shared storage), storage reporting, and set quota for the organization in Admin Console.


Adobe Support
Providing a single platform for customers to administer and communicate with Adobe Support across creative cloud, document cloud, and experience cloud products and channels.