How do I use Active Directory Security Groups to restrict access to users authenticating via SSO? | Community
Skip to main content
February 24, 2021
Solved

How do I use Active Directory Security Groups to restrict access to users authenticating via SSO?

  • February 24, 2021
  • 2 replies
  • 958 views

We have configured Workfront to use SSO and would now like to restrict the users who are allowed to get in by adding only those authorized users to a security group in our Active Directory.

How can we identify the security groups in Workfront?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by kynabaker16

Hi Carver,

It sounds like you might have already gotten your answer, but just in case anyone else has the same question, here's what Support suggests.

This is something you will need to configure at your Identity Provider. Within your Active Directory, you will need to create a group who has access to the Workfront app via SSO and then add your users to that group. If you require all Workfront users to authenticate via SSO, you will want to bulk edit your list of users on the People/Users page within Workfront. You can select all users, Edit, then check the Only Allow SAML 2.0 Authentication box, then Save.

Thank you,

Kyna

2 replies

kynabaker16
Adobe Employee
kynabaker16Adobe EmployeeAccepted solution
Adobe Employee
February 26, 2021

Hi Carver,

It sounds like you might have already gotten your answer, but just in case anyone else has the same question, here's what Support suggests.

This is something you will need to configure at your Identity Provider. Within your Active Directory, you will need to create a group who has access to the Workfront app via SSO and then add your users to that group. If you require all Workfront users to authenticate via SSO, you will want to bulk edit your list of users on the People/Users page within Workfront. You can select all users, Edit, then check the Only Allow SAML 2.0 Authentication box, then Save.

Thank you,

Kyna

CarverPeAuthor
March 17, 2021

Thank you. We worked with our Identity Provider to configure the security group.