Impersonation in IDP

[Hong Ye]

Here is the answer from our Adoble Sign admin regarding why user want to logon to Adobe Sign using shared account(departmental account):

Sign has delegated access to accounts, but the delegate can do only a few basic functions, such as view documents or send agreements.  Sign also has a limitation that you cannot transfer documents from one account to another.

We use delegated access to provide one or more people access to a department account, so that they can do their work there.  That way when people transition, we can just change who the delegate of the department account is.  

What you can't do is to create template agreements, workflows, or web forms via delegation, so that rules out using departmental accounts from owning these things.  These are reusable components that are even more important for business continuity that the individual documents.  If the account owner could log into the departmental account, they would be usable for these important functions.

Yes, Adobe should make account delegation more usable, but influencing Adobe to do anything is a long and uncertain process.  I am pursuing it, but the need remains and relief from Adobe, if any, is a long way off.

Hong

On 8/22/17, 12:38 PM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

    > Thanks Scott. In Adobe sign, there is a need to use shared account. 
    
    Why? Adobe allows multiple accounts to have any given role.
    
    > We don’t want user to share password. I don’t know what SP Adobe use. Do you know
    > if switching user can be done in Adobe sign?
    
    No, it can't.
    
    -- Scott
    
    -- 
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net