Open Navigation

Adobe User Management

Adobe User Management gives you access to users, groups, and entitlements for your Adobe products and services.

Overview

With the Adobe User Management connector, Enterprise customers can automatically provision users, synchronize user directories, and grant and remove access to Adobe products from a central management application.

Authentication

When using the Adobe User Management connector, the first thing you will need to do is go to your Tray.io account page, and select the workflow you wish to work on. Once in the workflow dashboard itself, search and drag the Adobe User Management connector from the connectors panel (on the left hand side) onto your workflow.

With the new Adobe User Management connector step highlighted, in the properties panel on the right, click on 'New Authentication' which is located under the 'Settings' heading.

adobe-user-management-auth

This will result in a Tray.io authentication pop-up window, that should look like this:


As you can see, besides from naming your authentication appropriately, you will need your 'Client ID', 'Client secret', 'Technical account ID', 'Organization ID', and 'Private Key'. While this may seem intimidating, it is simpler to gather than it first appears.

In order to get these fields, sign into your Adobe account and head to your Adobe dashboard. Make sure to select the Company account option if you have two to choose from.

adobe-user-management-account

This should lead you into your Adobe I/O Console dashboard as planned. For the sake of argument, we will assume here that you need to set up a new integration. Click the blue button in the right hand corner that states 'New integration'.

adobe-user-management-integrations

Here you will be given two options: "Do you want to access an API or receive near-real time events?". Make sure to select 'Access and API' and then press continue. Note that the way this is selected is with a grey radio button which can be easily missed if you're not careful:

adobe-user-management-access-api

Once you are on the next page of options, you will need to select the Adobe service you wish to integrate with. In our case you can clearly see that the dropdown menu in the right hand corner lists 'Tray (Exchange Partner)'.

If you do not have any options to choose from please rectify this and create one before continuing.

As you can see there are several choices available, but the only one you need concern yourself with is the 'User Management API' option. Scroll down to the bottom and once more click the blue continue button to move on to the next page.

adobe-user-management-user-management

This is where you will name and describe your new integration. You will need to paste in your 'Public keys certificates' in order to generate the credentials required for your Tray.io integration, and thereby complete the Adobe integration creation.

For Mac and Linux users, please open your terminal and use the following command:

openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout private.key -out certificate_pub.crt

For Windows users (or those looking for more detail), please follow the instructions outlined HERE at the Adobe authentication methods site.

Once you have your key, your integration details should look similar to this:

adobe-user-management-cert

Once loading is complete you will get a completed notification screen, which will have a redirect option to your integration details page:

adobe-user-management-cert

Here is where all the information required for your Tray.io authentication integration is held. Copy the relevant items over into their respective field names as appropriate. Note that you will need to retrieve your 'Client secret' and have your private key (which you generated earlier together with your public certification) on hand.

adobe-user-management-cert

Once you have clicked the 'Add authentication' button, go to back to your authentication field (within the workflow dashboard properties panel from earlier), and select the recently added authentication from the dropdown options now available.

Your connector authentication setup should now be complete, and if you check your integrations dashboard, you will see the newest one at the top.

adobe-user-management-new-integration

IMPORTANT: if you see the following error message, please double check your authentication is 100% accurate i.e. no spaces, gaps or extra letters etc. The authentication is extremely sensitive and will return the following should something "minor" be at fault:

{
"message": "error:0909006C:PEM routines:get_name:no start line"
}

It may be best to simply delete the orginal and create a new one from scratch if you cant find an obvious problem.

Basic Operations List

Full list of operations can be found HERE

  • List users in group
  • List users in organisation
  • Get user information
  • Raw HTTP Request (Advanced)

Using the Universal Operation ('Raw HTTP request')

As of version 1.0, it is now possible to effectively create your own operations.

This is a very powerful feature which you can put to use when there is an endpoint in Adobe User Management which is not used by any of our operations.

To use this you will first of all need to research the endpoint in the User Management API documentation, to find the exact format that Adobe User Management will be expecting the endpoint to be passed in.

Note that you will only need to add the suffix to the endpoint, as the base url will be automatically set (the base url is picked up from the value you entered when you created your authentication).

The base url is in the format of https://usermanagement.adobe.io/v2/usermanagement/

For example say that the list users in group operation did not exist in our Adobe User Management connector, and you wanted to use this endpoint, you would use the Adobe User Management API docs to find that the List users in group endpoint is a get request at the following url:

adobe-user-management-get-url

/v2/usermanagement/users/{orgId}/{page}/{groupName}

So if you know what your orgId, page and groupName are, you can get the list users in group details, with the following settings:

orgId: 12345@AdobeOrg

page: 0

groupName: photoshop

Final outcome: https://usermanagement.adobe.io/v2/usermanagement/users/12345@AdobeOrg/0/photoshop

adobe-user-management-raw-http

Example usage

TRAY POTENTIAL: Tray.io is extremely flexible. By design there is no 'fixed' way of working with it - you can pull whatever data you need from other services and work with it using our core and helper connectors. This demo which follows shows only one possible way of working with Tray.io and the Adobe User Management connector. Once you've finished working through this example please see our Introduction to working with data and jsonpaths page and Data Guide for more details.

Below is an example of a way in which you could potentially use the Adobe User Management connector, to get all the users in your group organisation, and then list a specific users details.

The steps will be as follows:

  1. Setup your manual trigger and first step of your Adobe workflow, to list all users in a particular organisation.
  2. Get a particular users information details from said list.

The final outcome should look like this:

adobe-user-management-complete-workflow

1 - Setup trigger & list all users

Once you have clicked 'Create new workflow' on your main Tray.io dashboard (and named said new workflow), select the Manual trigger from the trigger options available:

adobe-user-management-manual-trigger

Once you have been redirected to the Tray.io workflow dashboard, from the connectors panel on the left, add a Adobe User Management connector to your second step. Set the operation to 'List users in organization'.

Note that your 'Organisation ID' is a required field, and can be found in the overview section of the integration you are working with (as seen earlier during the authentication instructions).

adobe-user-management-step-1

Feel free to re-name your steps as you go along to make things clearer for yourself and other users.

2 - Get user details

Add another Adobe User Management connector to your next step. Set the operation to 'Get user information'. Once again you will need to hard code the 'Organisation ID'.

This time the second field requires a 'User string'. This is the user name or email address of the user required. You can use the connector-snake to auto-generate this jsonpath, just make sure that depending on the number of users returned, you set the number in your array appropriately as a result.

JSONPATHS: For more information on what jsonpaths are and how to use jsonpaths with Tray.io, please see our Intro page and Data Guide for more details.

CONNECTOR-SNAKE: The simplest and easiest way to generate your jsonpaths is to use our feature called the Connector-snake. Please see the main page for more details.

In our use case there are three users returned in our first Adobe step, which means in order to get the last user's details, we will set the number to 2 as zero is a counted figure.

$.steps.adobe-user-management-2.users[2].email

adobe-user-management-step-2

When you now go to your debug panel, you should see only one users details:

adobe-user-management-step-2-output

BEST PRACTICES: Whenever you do decide to use create your own workflow, please make sure you take a look at our Managing data best practices guide.

Was this article helpful?
Yes
No