Starting Campaign v8.6, the authentication process to Campaign v8 is being improved. All operators will use Adobe Identity Management System (IMS) only to connect to Campaign. Connecting with user/password (aka native authentication) will no longer be allowed. Adobe recommends to perform this migration in Campaign v8.5.2 to be able to migrate smoothly to Campaign v8.6.
As a Campaign Classic v7 managed services customer, if you are migrating to Campaign v8, this procedure also applies to you.
This article details the steps required to migrate a technical operator to technical account on Adobe Developer console.
With Campaign v8, all regular users should already connect to the Adobe Campaign client console using their Adobe ID, through Adobe Identity Management System (IMS). However, with some older configurations, user/password connections were still available. This will no longer be permitted starting Campaign v8.6.
In addition, as part of the effort to reinforce security and authentication process, Adobe Campaign client application now calls Campaign APIs directly using the IMS technical account token. Migration for technical operators is detailed in a dedicated article, available in this page.
This change is applicable starting Campaign v8.5.2, and will be mandatory starting Campaign v8.6.
If operators in your organization are connecting to Campaign client console using their login/password (aka. native authentication), you are impacted, and must migrate these operator(s) to Adobe IMS as detailed below.
Migration to Adobe Identity Management System (IMS) is a security imperative to make your environments secure and standardized, as most of the other Adobe Experience Cloud solutions and apps are already on IMS.
Before starting the migration process, you must reach out to your Adobe representative (Transition Manager) so that Adobe technical teams can migrate your existing Operator groups and Named rights to Adobe Identity Management System (IMS).
Key steps for this migration are listed below:
You can now migrate your technical operator(s) to Adobe Developer Console as detailed in this technote. This step is mandatory if you are using Campaign APIs.
Once this migration is completed, confirm to your Adobe Transition Manager: Adobe then marks the migration as complete, and blocks new native user creation and native user login. Your environment is then secured and standardized.
A prerequisite for the migration to Adobe Identity Management System (IMS) is to upgrade your environment to Campaign v8.5.2.
You can start IMS migration on your stage environment, once it is upgraded to Campaign v8.5.2, and accordingly plan for production environment.
After your environments have been upgraded to Campaign v8.5.2, you can initiate your transition to Adobe Identity Management System (IMS).
New native user creation is still allowed until the IMS migration is complete.
Once end-user migration and technical user migration to Adobe Identity Management System (IMS) is done, you must contact your Adobe Transition Manager so that Adobe can mark your migration as complete, and block user creation from the client console, and disable native user login.
Once full IMS migration is complete, Adobe will apply the restrictions which will block new native user creation. These restrictions are not applied until IMS migration is complete.
For new customers - new native user creation is not permitted from the beginning.
As a Campaign Administrator, you can grant permissions to the users of your organization through Adobe Admin Console and Campaign Client Console. Users log on to Adobe Campaign with their Adobe ID. Learn more in this documentation.
As a Campaign Administrator, you must add email IDs to all native users from the client console. To perform this, follow the steps below:
Learn how to connect to Campaign with your Adobe ID in this section.
To finalize the migration (migrate users and product profiles), Adobe requires one hour window with no downtime to any of your instances (workflows, etc).
During this timeframe, all Campaign users need to log off, and log back with their Adobe ID once the migration to IMS is finalized.
Adobe strongly recommends all users should be logged off during the migration window.
There are 2 aspects in this migration: end-users migration and technical users migration (used in APIs in your custom code).
If all your users (Campaign operators) are on IMS you do not need to perform this migration. However, you still need to migrate Technical users you might have used in custom code. Learn more in this page.
Once this migration is done, you must contact your Adobe Transition Manager so that Adobe finalizes the migration.