Integrate Adobe Cloud using OAuth Server-to-Server credentials

  • Release version: Yokohama
  • Updated January 30, 2025
  • 6 minutes to read

    • Integrate your ServiceNow® instance with Adobe Cloud services by using OAuth Server-to-Server credentials.

    Create a project and add APIs using OAuth

    Create a project in the Adobe Developer Console for accessing Adobe APIs and add APIs to your project using OAuth.

    Before you begin

    Role required: Adobe Cloud admin

    Procedure

    1. Create a project in the Adobe Developer Console to access the Adobe APIs by selecting Create new project.
      For more information, see Projects Overview.
    2. Add an API to your project by selecting Add API.
      For more information, see Add API to project using OAuth.
    3. Select User Management API for the Adobe service that you want to integrate with.
      This service enables you to access the Adobe user management API. After you successfully add the API to your project, you’re redirected to the API overview page.
    4. Select Next.
    5. On the Configure API form, expand Credentials.
    6. Select the OAuth Server-to-Server authentication.
    7. Provide a name in the Credential name field to find the correct API credential easily on the Admin Console > Users > API Credentials.
      You can also modify the name later in your project on the OAuth Server-to-Server credential overview page.
    8. Select Save configured API.
      The following values are displayed on the credential overview page:
      • CLIENT ID
      • CLIENT SECRET
      • SCOPES
      • CREDENTIAL NAME
      • TECHNICAL ACCOUNT ID
      • TECHNICAL ACCOUNT EMAIL
      • ORGANIZATION ID
      Note:

      Copy the CLIENT ID and ORGANIZATION ID and also retrieve the CLIENT SECRET to use them later.

    9. Get the Connection URL (Instance) URL from the Adobe Developer Console to create and get an OAuth token for Adobe Cloud.
      1. In the Generate access token section, select View cURL command.
      2. Copy the Connection URL.
        Note:

        Copy only the required URL from the entire command.

        For example, here the Connection URL is the highlighted part.

        Connection URL in Adobe Developer Console.

    Create an Adobe Cloud integration profile using OAuth

    Create an Adobe Cloud integration profile on your ServiceNow instance by using OAuth credentials to track your software subscriptions and to determine your license compliance.

    Before you begin

    Role required: sam_admin, sam_integrator

    Activate the following plugins:
    • Software Asset Management Professional for Adobe (com.sn_samp_adobe)
    • Software Asset Management - SaaS License Management (sn_sam_saas_int) from ServiceNow Store

    About this task

    If you’re using Software Asset Workspace, the option to create the Adobe Cloud integration profile in Core UI is inactive.

    Procedure

    1. Navigate to the integration profile.
      InterfaceAction
      Core UI
      1. Navigate to All > Software Asset > SaaS License > Direct Integration Profiles.
      2. Select New.
      3. Select Adobe Cloud Integration Profile.
      Software Asset Workspace
      1. Navigate to License operations > User subscription > Direct integration profiles.
      2. Select New.
      3. Select Adobe Cloud from the drop-down list.
      4. Select Continue.
    2. On the form, fill in the fields.
      Table 1. Integration Profile form
      Field Description
      Display name Name of the Adobe Cloud integration profile.
      Authentication type Type of authentication to access Adobe Cloud APIs.
      • OAuth 2.0
      • JWT
      Note:
      • For the existing Adobe Cloud integration profiles before upgrade to Software Asset Management - SaaS License Management 13.1.0 version or later, this field is automatically set to JWT. For more information, see Integrate Adobe Cloud using Service Account (JWT) credentials.
      • For all the new Adobe Cloud integration profiles, this field is automatically set to OAuth 2.0.
      Profile type Type of integration profile. This field is automatically set to Adobe subscription.
    3. In the Process configuration section, view the required user roles or API permissions to minimize security risks and optimize SaaS licenses.
      Note:

      The Download subscriptions check box is selected by default and you can't clear it.

      For more information about the required roles and scopes, see Minimal user permissions table.
    4. Select Submit.
      The Connection & Credential field appears on the form and is automatically set to sn_sam_saas_int.Adobe_OAuth.
    5. Select the preview icon (Preview icon) beside the Connection & Credential field to open the Connection & Credential Aliases record.
    6. Select the Create New Connection & Credential related link.
    7. On the form, fill in the fields.
      Table 2. Create a Connection and Credential form
      Field Description
      Connection Name Name of the Adobe Cloud connection.
      Connection URL (Instance URL) URL for the connection. This field is automatically set to https://<Instance Name>.adobelogin.com. For more information about the steps to get the URL, see Step 9 in Create a project and add APIs using OAuth.
      OAuth Client ID Client ID that you generated while creating an Adobe Cloud OAuth credential.
      OAuth Client Secret Client Secret that you retrieved while creating an Adobe Cloud OAuth credential.
      OAuth Redirect URL https://<instance_name>/oauth_redirect.do, where the instance name is the name of your ServiceNow instance.
      Organization ID Adobe Cloud Organization ID that you find while creating an Adobe Cloud OAuth credential.
    8. Select Create and Get OAuth Token.
      Note:
      For the role required to perform this step, refer to the Minimal user permissions table.
    9. On the integration profile form, select Validate Connection to verify the connection and credential details of this integration.

    Result

    Adobe subscription data is pulled into Software Asset Management when the SAM - Import Adobe User Subscriptions scheduled job runs. When the subscription data is pulled, the SAM - Optimize Adobe Subscriptions scheduled job runs monthly to optimize the Adobe Creative Cloud subscriptions.

    This job completion results in the following:
    • An optimization candidate that consolidates three (configurable) or more Single App or individual product subscriptions and recommends Adobe Creative Cloud All Apps when it isn't installed.
    • A reclamation candidate that reclaims Single App or individual product subscriptions with dual licenses when Adobe Creative Cloud All Apps is installed.

      Let's say, a user is subscribed to Adobe Creative Cloud All Apps and also consumes licenses for Single App or individual products such as Adobe Acrobat and Adobe Photoshop. In this dual license scenario, the Software Asset Management application recommends reclaiming the licenses for Single App or individual product subscriptions.

    • A reclamation candidate that reclaims three (configurable) or more Single App or individual product subscriptions that are actively used and an optimization candidate that recommends assigning Adobe Creative Cloud All Apps.

      Let's say, a user is subscribed to Adobe Acrobat, Adobe Illustrator, and Adobe Photoshop and uses all these products actively. In this scenario, the Software Asset Management application recommends reclaiming the licenses for these individual product subscriptions and recommends using Adobe Creative Cloud All Apps.

    • A reclamation candidate that reclaims Adobe Creative Cloud All Apps when less than three (configurable) individual products are actively used and an optimization candidate that recommends assigning Single App or individual product subscriptions that are actively used.

      Let's say, a user is subscribed to Adobe Creative Cloud All Apps but is using less than three individual Creative Cloud products actively. In this scenario, the Software Asset Management application reclaims the Adobe Creative Cloud All Apps license and recommends assigning these individual product subscriptions that are actively used.

    What to do next

    If you want to set up multiple integration profiles with unique connections, create child aliases to manage different configurations and settings for each integration profile. For more information, see Create a child alias to set up multiple integration profiles.

    View the subscription data by navigating to All > SaaS License > All User Subscriptions. You can check the status of the SAM - Import Adobe User Subscriptions job by navigating to All > Software Asset > Administration > Job Results.

    You can also view information about your Adobe subscriptions, compliance, and costs on the Office 365 & Adobe Cloud dashboard in Software Asset Management classic.

    After creating an integration profile, you can view information about software models, unrecognized subscription identifiers, scheduled jobs, scheduled job results, and software subscriptions in the Software Asset Workspace. Navigate to License operations > User subscription > Direct integration profiles.