Adobe

Discover users and track Adobe license assignments across your organization via the Adobe User Management API

Adobe provides creative and productivity software used across design, marketing, and content teams - including Acrobat, Creative Cloud, and Experience Cloud. Connecting Adobe to Harmony via the User Management API (UMAPI) gives IT teams visibility into who has access to which Adobe products, enabling accurate license tracking and spend optimization.

This integration is read-only. Harmony pulls user and license data from Adobe but does not modify your Adobe organization.

What the Adobe integration enables

Capability	Description
User Discovery	Surface all Adobe users in Harmony's software inventory
License Tracking	See which Adobe products and entitlements are assigned to each user
Admin Visibility	See which users hold Adobe administrator roles, and which type
Spend Visibility	Review paid product entitlements per user to right-size Adobe spend

Prerequisites

• Adobe Admin Console Access: System Administrator role in Adobe Admin Console
• Adobe Developer Console Access: Ability to create projects and OAuth credentials
• Harmony Account: Active Harmony workspace

Connect Adobe to Harmony

Step 1: Create an OAuth Credential in Adobe Developer Console

1. Go to Adobe Developer Console and sign in as a System Administrator
2. Click Create new project
3. Click Add API and select User Management API
4. Choose OAuth Server-to-Server as the credential type
5. Click Save configured API
6. Copy the Client ID and Client Secret from the credential details page

OAuth Server-to-Server is the only supported credential type. Adobe's legacy JWT / Service Account credentials have reached end of life and no longer issue access tokens - a JWT credential will fail to connect.

Before moving on, confirm that the User Management API scope (user_management_sdk) is enabled in your project. Even if your credentials authenticate successfully, a missing scope means the resulting token will not have the permissions required for user management access. You can verify this under the credential's Scopes section in the Adobe Developer Console.

Step 2: Find your Organization ID

1. Go to Adobe Admin Console
2. Navigate to Settings > Organization
3. Copy the Organization ID - it follows the format XXXXX@AdobeOrg (e.g. A495E53@AdobeOrg)

Step 3: Navigate to Integrations

1. Log in to your Harmony dashboard
2. Go to Settings > Integrations
3. Find Adobe under SaaS Applications and click Connect

Step 4: Enter Credentials

1. Enter your Client ID
2. Enter your Client Secret
3. Enter your Organization ID (e.g. A495E53@AdobeOrg)
4. Click Connect

Once connected, Harmony refreshes your Adobe user inventory every 6 hours.

Multiple Adobe organizations: If your company manages more than one @AdobeOrg organization, you can connect each one as a separate Adobe integration. Repeat these steps with the Client ID, Client Secret, and Organization ID belonging to that organization.

Disconnect Adobe from Harmony

1. Log in to your Harmony dashboard
2. Go to Settings > Integrations
3. Find Adobe under SaaS Applications and click the integration card
4. Click Disconnect
5. Confirm the disconnection when prompted

Once disconnected, Harmony stops syncing data from Adobe. Previously synced data remains available in Harmony.

What Harmony Syncs

From Adobe:

• Users (name, email, account status, identity type, email domain, and country)
• Product license assignments per user
• License tier per user (Paid for users holding a product profile, Free otherwise)
• Product profiles and entitlements
• Group memberships
• Administrator roles per user - System Administrator, Deployment Administrator, Support Administrator, Product Administrator, Product Profile Administrator, User Group Administrator, Contract Administrator, and Storage Administrator

Only active users are returned by Adobe. Adobe's user-listing API returns users with an active status only. Harmony therefore detects offboarded or removed users when they stop appearing in a sync, rather than from a status change on the user record.

Sign-in and usage data is not available from Adobe. Adobe exposes no public API for per-user last login or per-user product usage in Admin Console organizations, so Harmony cannot report Adobe activity or last-seen dates.

Permissions Explained

Harmony authenticates with your OAuth Server-to-Server credential and requests a single scope string. Adobe does not offer finer-grained scopes for the User Management API.

Scope	Purpose
openid, AdobeID	Required by Adobe IMS to issue the server-to-server access token
user_management_sdk	Read access to the User Management API - your organization's users, groups, and product profiles

Harmony only issues read requests against two User Management API endpoints: the organization's user list and its group list. No endpoint that creates, modifies, or removes Adobe users, groups, or licenses is ever called.

Creating the User Management API credential in the Adobe Developer Console requires the System Administrator role in your Adobe organization. Other administrator roles cannot create the integration.

Use Cases

License Reclamation

Find the users who hold paid Adobe product entitlements - such as Creative Cloud or Acrobat product profiles - and reclaim seats from people who no longer need them

Offboarding Verification

Confirm Adobe licenses have been removed as part of employee offboarding workflows

Software Inventory

Include Adobe products in a complete view of software usage and spend across the organization

Troubleshooting

Connection fails with an authorization error

Possible causes:

• The credential is a legacy JWT / Service Account credential rather than OAuth Server-to-Server
• The User Management API (user_management_sdk) scope is not enabled on the project
• The credential was created by a user without the System Administrator role
• The Client ID, Client Secret, or Organization ID was copied incorrectly

Solutions:

1. In the Adobe Developer Console, confirm the credential type is OAuth Server-to-Server and recreate it if it is not
2. Confirm user_management_sdk appears under the credential's Scopes section
3. Recreate the project while signed in as a System Administrator
4. Re-copy the Organization ID from Adobe Admin Console > Settings > Organization - it must be entered exactly as shown, in the XXXXX@AdobeOrg form

Adobe users are not appearing in Harmony

Possible causes:

• The first sync has not finished yet
• The Organization ID belongs to a different Adobe organization than the one holding your users

Solutions:

1. Wait for the sync to complete - Harmony refreshes the Adobe user inventory every 6 hours
2. Verify the Organization ID in Adobe Admin Console > Settings > Organization matches the organization whose users you expect to see
3. If you manage several Adobe organizations, connect each one as its own Adobe integration

No last login or usage data for Adobe users

Possible causes:

• Adobe does not publish sign-in or product usage data for Admin Console organizations

Solutions:

1. This is an Adobe platform limitation, not a configuration problem - no Adobe API exposes per-user last login or per-user product usage, so Harmony cannot surface it. Use product entitlements to review who holds paid Adobe seats

Data & Privacy

Key privacy principles

For information about how Harmony handles your data, see our Privacy Policy.

• Harmony accesses Adobe data in read-only mode and does not modify any data in your Adobe organization
• The integration can be revoked at any time by disconnecting it in Harmony, or by deleting the OAuth Server-to-Server credential in the Adobe Developer Console