Page History

Since every institution gets their own instance of Adobe Connect Creative Cloud with which a connection needs to be configured, institutions need to sign in with the account that comes with their Adobe license. SURF does not have that information, so institutions need to configure part of the connection. After the institution has taken some steps, SURF also needs to take some steps to finish setting up the connection.

This document describes how to do this and is based on the experience of AVANS. Replace links as shown by what you have configured in your Adobe Application. After following the steps below the users of your IdP should be able to connect to Adobe ConnectCreative Cloud.

Configuration of Adobe

• Navigate to the Adobe Admin console and logon to the service: https://adminconsole.adobe.com/
• Under Settings - Identity - Domains add the domain names your users use in the email address, and confirm these via DNS changes as prompted during entry.

...

• Here you will enter the SURFconext metadata location, the Single Sign-on location and the assertion signing certificate of the Test or Production of SURFconext. Refer to this site for the up-to-date information about this. 
  1. In case you first want to test the connection, you can use the SURFconext Test Environment. To connect to the SURFconext Test Environment use the following data:
     
     1. IdP issuer: https://engine.test.surfconext.nl/authentication/idp/metadata
     2. IdP login url: https://engine.test.surfconext.nl/authentication/idp/single-sign-on/key:20190208
     3. IdP certificate is the Assertion signing certificate as found on https://metadata.test.surfconext.nl/ (engine.test.surfconext.nl 20190208 certificate)
  2. In case you want to configure the connection for your production IdP, connect to the SURFconext Production Environment using the following data:
     
     1. IdP issuer: https://engine.surfconext.nl/authentication/idp/metadata
     2. IdP login url: https://engine.surfconext.nl/authentication/idp/single-sign-on/key:20181213
     3. IdP certificate is the Assertion signing certificate as found on https://metadata.surfconext.nl/ (engine.surfconext.nl 20181213 certificate)
• Some work on SURFconext needs to be done as well. You will see a 'Download Metadata' button. You will need this downloaded metadata later on, when you define the service in SURFconext. See the paragraph below for more on that.
  

• Now that you have configured the Directory as mentioned above you can link this directory to the previously created domains. Navigate to the 'Domains' screen as shown below:

...

• In the tab "Events" you will find logging when the link is active.

Configuration SURFconext

By now, you should be finished with configuring the instance of Adobe Connect Creative Cloud and it is ready to be used with SURFconext. Before you can use it to authenticate to the service using SURFconext, Adobe Connect needs Creative Cloud needs to be configured in SURFconext. At this point there are three options for you to proceed:

...

Attribute Manipulation

Adobe does not use standard attribute names. As a result, SURFconext will have to make adjustments to make this work. Send a mail to support@surfconext.nl and ask to enable attribute manipulation for the entity of the following attributes :

...