Adobe Resource Synchronizer Login Items In

| Posted on by

-->

In this tutorial, you'll learn how to integrate Adobe Sign with Azure Active Directory (Azure AD). When you integrate Adobe Sign with Azure AD, you can:

  1. Jun 02, 2021 The User Sync tool is a command-line utility that moves user and group information from your organization’s enterprise directory system (such as an Active Directory or other LDAP systems) to your organization’s directory in the Adobe Admin Console.
  2. By default, all companies sync data with Adobe Media Optimiz er (AMO). In the Admin UI, each compan y container has a data source that manages this process. This data source is Adobe AMO (ID 411). Clic k a container ro w (under the Containers tab) for a selected company to disable this default sync or to add and remove other data sources.
  3. Click on the menu bar icon. Click the ellipsis icon at the top-right. Uncheck “Launch at login”. Note: The “Preferences” option does not appear until you log in to Creative Cloud. To turn off everything Adobe launches at startup on the Mac you need to both disable its launchd jobs and the Adobe Core Sync extension.
  4. Creative Cloud Libraries help your team to centrally manage and distribute design and brand systems assets at scale. Start by curating your sticker sheet with set of components and styles that constitute design and brand system in an XD cloud document; when ready to share those reusable assets with your broader team, you can publish your sticker sheet cloud document as a library and invite.

If your organization configured Azure Sync with the Adobe Admin Console before November 8, 2020: you must upgrade to the latest version of Azure Sync. If your identity provider is Azure AD and you do not have a federated directory in the Adobe Admin Console: you can set up federation using the following ways.

  • Control in Azure AD who has access to Adobe Sign.
  • Enable your users to be automatically signed-in to Adobe Sign with their Azure AD accounts.
  • Manage your accounts in one central location - the Azure portal.

Prerequisites

To get started, you need the following items:

  • An Azure AD subscription. If you don't have a subscription, you can get a free account.
  • Adobe Sign single sign-on (SSO)-enabled subscription.

Scenario description

In this tutorial, you configure and test Azure AD single sign-on in a test environment.

  • Adobe Sign supports SP initiated SSO

Add Adobe Sign from the gallery

To configure the integration of Adobe Sign into Azure AD, you need to add Adobe Sign from the gallery to your list of managed SaaS apps.

  1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
  2. On the left navigation pane, select the Azure Active Directory service.
  3. Navigate to Enterprise Applications and then select All Applications.
  4. To add new application, select New application.
  5. In the Add from the gallery section, type Adobe Sign in the search box.
  6. Select Adobe Sign from results panel and then add the app. Wait a few seconds while the app is added to your tenant.

Configure and test Azure AD SSO for Adobe Sign

In this section, you configure and test Azure AD single sign-on with Adobe Sign based on a test user called Britta Simon.For single sign-on to work, a link relationship between an Azure AD user and the related user in Adobe Sign needs to be established.

To configure and test Azure AD single sign-on with Adobe Sign, you need to perform the following steps:

  1. Configure Azure AD SSO - to enable your users to use this feature.
    1. Create an Azure AD test user - to test Azure AD single sign-on with Britta Simon.
    2. Assign the Azure AD test user - to enable Britta Simon to use Azure AD single sign-on.
  2. Configure Adobe Sign SSO - to configure the Single Sign-On settings on application side.
    1. Create Adobe Sign test user - to have a counterpart of Britta Simon in Adobe Sign that is linked to the Azure AD representation of user.
  3. Test SSO - to verify whether the configuration works.

Configure Azure AD SSO

In this section, you enable Azure AD single sign-on in the Azure portal.

To configure Azure AD single sign-on with Adobe Sign, perform the following steps:

  1. In the Azure portal, on the Adobe Sign application integration page, select Single sign-on.

  2. On the Select a Single sign-on method dialog, select SAML/WS-Fed mode to enable single sign-on.

  3. On the Set up Single Sign-On with SAML page, click pencil icon to open Basic SAML Configuration dialog.

  4. On the Basic SAML Configuration section, perform the following steps:

    a. In the Sign on URL text box, type a URL using the following pattern:https://<companyname>.echosign.com/

    b. In the Identifier (Entity ID) text box, type a URL using the following pattern:https://<companyname>.echosign.com

    Note

    These values are not real. Update these values with the actual Sign on URL and Identifier. Contact Adobe Sign Client support team to get these values. You can also refer to the patterns shown in the Basic SAML Configuration section in the Azure portal.

  5. On the Set up Single Sign-On with SAML page, in the SAML Signing Certificate section, click Download to download the Certificate (Base64) from the given options as per your requirement and save it on your computer.

  6. On the Set up Adobe Sign section, copy the appropriate URL(s) as per your requirement.

Create an Azure AD test user

In this section, you'll create a test user in the Azure portal called B.Simon.

  1. From the left pane in the Azure portal, select Azure Active Directory, select Users, and then select All users.
  2. Select New user at the top of the screen.
  3. In the User properties, follow these steps:
    1. In the Name field, enter B.Simon.
    2. In the User name field, enter the username@companydomain.extension. For example, B.Simon@contoso.com.
    3. Select the Show password check box, and then write down the value that's displayed in the Password box.
    4. Click Create.

Assign the Azure AD test user

In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Adobe Sign.

  1. In the Azure portal, select Enterprise Applications, and then select All applications.
  2. In the applications list, select Adobe Sign.
  3. In the app's overview page, find the Manage section and select Users and groups.
  4. Select Add user, then select Users and groups in the Add Assignment dialog.
  5. In the Users and groups dialog, select B.Simon from the Users list, then click the Select button at the bottom of the screen.
  6. If you are expecting a role to be assigned to the users, you can select it from the Select a role dropdown. If no role has been set up for this app, you see 'Default Access' role selected.
  7. In the Add Assignment dialog, click the Assign button.

Configure Adobe Sign SSO

  1. Before configuration, contact the Adobe Sign Client support team to add your domain in the Adobe Sign allow list. Here's how to add the domain:

    a. The Adobe Sign Client support team sends you a randomly generated token. For your domain, the token will be like the following: adobe-sign-verification= xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

    b. Publish the verification token in a DNS text record, and notify the Adobe Sign Client support team.

    Note

    This can take a few days, or longer. Note that DNS propagation delays mean that a value published in DNS might not be visible for an hour or more. Your IT administrator should be knowledgeable about how to publish this token in a DNS text record.

    c. When you notify the Adobe Sign Client support team through the support ticket, after the token is published, they validate the domain and add it to your account.

    d. Generally, here's how to publish the token on a DNS record:

    • Sign in to your domain account
    • Find the page for updating the DNS record. This page might be called DNS Management, Name Server Management, or Advanced Settings.
    • Find the TXT records for your domain.
    • Add a TXT record with the full token value supplied by Adobe.
    • Save your changes.

  2. In a different web browser window, sign in to your Adobe Sign company site as an administrator.

  3. In the SAML menu, select Account Settings > SAML Settings.

  4. In the SAML Settings section, perform the following steps:

    a. Under SAML Mode, select SAML Mandatory.

    b. Select Allow Echosign Account Administrators to log in using their Echosign Credentials.

    c. Under User Creation, select Automatically add users authenticated through SAML.

    d. Paste Azure Ad Identifier, which you have copied from the Azure portal into the Idp Entity ID text box.

    e. Paste Login URL, which you have copied from Azure portal into the Idp Login URL text box.

    f. Paste Logout URL, which you have copied from the Azure portal into the Idp Logout URL text box.

    g. Open your downloaded Certificate(Base64) file in Notepad. Copy the content of it into your clipboard, and then paste it to the IdP Certificate text box.

    h. Select Save Changes.

Create Adobe Sign test user

To enable Azure AD users to sign in to Adobe Sign, they must be provisioned into Adobe Sign. This is a manual task.

Note

You can use any other Adobe Sign user account creation tools or APIs provided by Adobe Sign to provision Azure AD user accounts.

  1. Sign in to your Adobe Sign company site as an administrator.

  2. In the menu on the top, select Account. Then, in the left pane, select Users & Groups > Create a new user.

  3. In the Create New User section, perform the following steps:

    a. Type the Email Address, First Name, and Last Name of a valid Azure AD account you want to provision into the related text boxes.

    b. Select Create User.

Note

The Azure Active Directory account holder receives an email that includes a link to confirm the account, before it becomes active.

Test SSO

In this section, you test your Azure AD single sign-on configuration with following options.

  • Click on Test this application in Azure portal. This will redirect to Adobe Sign Sign-on URL where you can initiate the login flow.

  • Go to Adobe Sign Sign-on URL directly and initiate the login flow from there.

  • You can use Microsoft My Apps. When you click the Adobe Sign tile in the My Apps, you should be automatically signed in to the Adobe Sign for which you set up the SSO. For more information about the My Apps, see Introduction to the My Apps.

Next steps

Once you configure Adobe Sign you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. Learn how to enforce session control with Microsoft Cloud App Security.

There are many possible causes for this problem, and it may be very hard to resolve. Depending on your level of experience, you may need to get someone more experienced to help you with some of the steps below. Please take whichever of the steps is applicable that you haven't already tried.

Back up all data before making any changes.

If you get the alert in the login screen before you log in, skip Steps 1-9 and start with Step 10.

Step 1

If you get the alert right after you log in, it's probably caused by one of your login items or by software that otherwise loads at startup or login. Common offenders are '1Password' and 'Adobe Resource Synchronizer,' but there are many others.

Select the Login Items tab in the Users & Groups pane of System Preferences. Delete any suspicious items. If you're not sure which ones to delete, double-click each to test it.

To avoid confusion, note that checking or unchecking the box next to a login item does not inactivate it. You have to delete the item from the list.

Step 2

If there's an icon representing the server in the sidebar of a Finder window, hold down the command key and drag it out.

Step 3

You may have created aliases to files or folders on the server. If you don't know whether you did that, you can find all aliases as follows.

In the Finder, please press command-F to open a search window, or select

File▹ Find

from the menu bar. In the search window, select

Search: This Mac

from the row of tokens below the toolbar. Below that are two popup menus of search criteria, initially showing

Kind is Any

From the second menu, select

Other

There will now be a text box in which you can enter a file type. Enter 'alias' (without the quotes.)

The search window will now show all aliases on mounted volumes. You can see the target of each alias by selecting it and opening the Info window. Delete any that refer to the server.

Step 4

Open the Printers & Scanners pane in System Preferences and delete any network devices you no longer use. If in doubt, delete them all and add back the ones you want.

Step 5

Back up all data, then open the iCloud pane in System Preferences. If the box marked iCloud Drive is checked, uncheck it and confirm. Your iCloud data should be preserved on Apple's servers.

Test to see whether there's an improvement, then re-check the box and test again. It may take a noticeable amount of time for your data to resynchronize. In the sidebar of a Finder window, a pie-chart icon next to iCloud Drive will show the progress of the download. When the download is complete, the icon will change to a cloud.

If you use Family Sharing, disable that too and test.

Step 6

Copy the line below to the Clipboard as in Step 3:

~/Library/PDF Services

Adobe

In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens. You may not see what you pasted because a line break is included. Press return. A folder may open. If it does, move the contents to the Desktop, or to a new folder on the Desktop. Log out and log back in. Test. If there's no change, put the items you moved back where they were and continue.

Step 7

Open the folder

~/Library/Preferences

as in Step 5 and move the file named 'loginwindow.plist' items in that folder to the Trash, if it exists (it may not.)

Log out and back in again, and test.

Step 8

Other possible causes are references in the iPhoto, Photos, iTunes, or iMovie library pointing to the server, bookmarks in the Preview application, and PDF files created by Adobe Acrobat with embedded scripts.

Try repairing the Photos library, or the iPhoto library, if applicable.

If you get the alert when connecting an iOS device with iTunes, re-create your iTunes library and playlists. See also this ASC discussion.

If you get the alert when selecting a screen saver, you may have moved your iTunes library to the file server.

Step 9

Resources such as images or sounds stored on the server may have been added to various applications. Examples would be pictures added to Contacts and custom sounds added to Mail. The range of possibilites is practically infinite, so I can't be more specific. You might get a hint by launching the Console application and looking for error messages that appear at the same time as the alerts.

Step 10

Disconnect all wired peripherals except those needed to start up. Start up in safe mode. Test. After testing, restart as usual (not in safe mode) and verify that you still have the problem.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.

Step 11

Launch the Directory Utility application. Depending on what version of OS X you have, you may be able to do that by entering the first few letters of its name in a Spotlight search. If that doesn't work, triple-click anywhere in the line of text below on this page to select it:

/System/Library/CoreServices

Right-click or control-click the selected text and select

Services ▹ Open

from the contextual menu.* A folder named 'CoreServices' will open. The Directory Utility application is in that folder, or in a subfolder named 'Applications'.

In the Directory Utility window, select the Directory Editor tool in the toolbar. Select Mounts from the Viewing menu in the toolbar, and /Local/Default from the node menu, if not already selected. On the right is a list of names and values. By default, the list is empty. If it's not empty, post a screenshot of the window and stop here.

*If you don't see the contextual menu item, copy the selected text to the Clipboard (command-C). Open a TextEdit window and paste into it (command-V). Select the line you just pasted and continue as above.

Step 12

Open the following file as you did in the last step:

/etc/auto_master

It will open in a TextEdit window. The contents should be exactly this:

#
# Automounter master map
#
+auto_master # Use directory service
/net -hosts -nobrowse,hidefromfinder,nosuid
/home auto_home -nobrowse,hidefromfinder
/Network/Servers -fstab
/- -static

If there are any other lines in the window, post them. Otherwise, close the window.

Step 13

Open a folder named 'SystemConfiguration' as before:

/Library/Preferences/SystemConfiguration

Move the contents of the folder to the Trash, except the file with this name:

com.apple.Boot.plist

Leave that file where it is.

Adobe Resource Synchronizer Login Items Information

You may be prompted for your administrator login password. Restart the computer and test.

If there's no change, restore each of the items you deleted from a backup, overwriting the one that may have been created in its place.

Adobe Resource Synchronizer Login Items In Chrome

If the problem is resolved, you may need to recreate some of your settings in the Network and Energy Saver preference panes.

Adobe Resource Synchronizer Login Items In Roblox

Jun 4, 2016 10:06 PM