Adobe

Overview

Connect your users to Adobe for Creative Cloud assets, document workflows, and identity integration.

Property	Value
Provider ID	adobe
Category	Design
PKCE	Supported
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create an Adobe OAuth App

Go to the Adobe Developer Console

Navigate to developer.adobe.com/console and click Create new project.

Add an API to the project

Open the project and click Add API. Choose the Adobe API the integration needs (e.g., Creative Cloud, Document Cloud).

Select OAuth Web App credentials

Choose OAuth User Authentication and select Web App as the platform. Web App requires the secret to live on a backend server.

Configure redirect URIs

Enter:

• Default Redirect URI: the Alter callback URL from the Developer Portal
• Redirect URI pattern: a regex that matches the default redirect URI (Adobe requires both)

Get credentials

Open the OAuth Web App credential and copy the Client ID and Client Secret.

Note

Adobe IMS requires openid and/or AdobeID as foundational identity scopes. The offline_access scope alone is not sufficient — it must be combined with openid or AdobeID to receive refresh tokens.

Warning

Never share your Client Secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Adobe provider

Go to OAuth Providers > Add Provider > Adobe.

Enter credentials

• Client ID: Paste your Adobe Client ID
• Client Secret: Paste your Adobe Client Secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
openid	OpenID Connect identity scope (required for authorization)
email	Read the user’s email address (email / email_verified id_token claims)
profile	Read the user’s basic profile — name, given_name, family_name id_token claims
AdobeID	Adobe identity scope (required for issuing identity tokens)
offline_access	Enable refresh tokens (requires openid or AdobeID as a base scope)
creative_sdk	Access Creative Cloud APIs (Photoshop, Lightroom, Creative SDK)
read_organizations	Read organization information

Notes

• Adobe IMS requires openid and/or AdobeID as foundational identity scopes; offline_access alone is insufficient.
• You may need to create an Adobe developer account first if you don’t have one.
• See the Adobe OAuth documentation for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
createLibraries	write	POST	/api/v1/libraries
getLibraries	read	GET	/api/v1/libraries
getLibrary	read	GET	/api/v1/libraries/{libraryId}
headLibrary	read	HEAD	/api/v1/libraries/{libraryId}
patchLibrary	write	PATCH	/api/v1/libraries/{libraryId}
deleteLibrary	delete	DELETE	/api/v1/libraries/{libraryId}
updateLibrary	write	PUT	/api/v1/libraries/{libraryId}/metadata
getLibraryElements	read	GET	/api/v1/libraries/{libraryId}/elements
postLibraryElements	write	POST	/api/v1/libraries/{libraryId}/elements
archiveLibraryElements	write	DELETE	/api/v1/libraries/{libraryId}/elements
getLibraryElement	read	GET	/api/v1/libraries/{libraryId}/elements/{elementId}
archiveLibraryElement	write	DELETE	/api/v1/libraries/{libraryId}/elements/{elementId}
updateLibraryElements	write	PUT	/api/v1/libraries/{libraryId}/elements/metadata
putLibraryElementRepresentations	write	PUT	/api/v1/libraries/{libraryId}/elements/{elementId}/representations
postLibraryComponent	write	POST	/api/v1/libraries/{libraryId}/representations/content
unArchiveLibraryElements	write	POST	/api/v1/libraries/{libraryId}/archive
deleteLibraryElements	delete	DELETE	/api/v1/libraries/{libraryId}/archive
deleteLibraryElement	delete	DELETE	/api/v1/libraries/{libraryId}/archive/{elementId}
getBookmarks	read	GET	/api/v1/libraries/bookmarks
addLibraryBookmarks	write	POST	/api/v1/libraries/bookmarks
putLibraryBookmark	write	PUT	/api/v1/libraries/bookmarks/{bookmarkId}
removeLibraryBookmark	delete	DELETE	/api/v1/libraries/bookmarks/{bookmarkId}
getPublicLibrary	read	GET	/api/v1/public/libraries/{libraryId}
headPublicLibrary	read	HEAD	/api/v1/public/libraries/{libraryId}
getPublicLibraryElements	read	GET	/api/v1/public/libraries/{libraryId}/elements
getPublicLibraryElement	read	GET	/api/v1/public/libraries/{libraryId}/elements/{elementId}
search	read	POST	/api/v1/search