Adobe Identity Management Overview

If you have a new account with Adobe Marketo Engage (new account, not just a new instance for an existing account) as of Feb 15, 2022, it may come integrated with the Adobe Identity Management System, depending on the product package purchased. To find out if you have it, please contact your Marketo Admin or your account’s Customer Success Manager.

Existing Marketo subscriptions will be migrated to the Adobe Identity Management System beginning later this year.

NOTE

Marketo Support will not be able to provide any updates regarding Adobe IMS migration. Your Customer Success Manager will reach out with the estimated timeline in the coming months.

Profile Levels

Adobe Marketo Engage subscriptions onboarded to the Adobe Identity Management System supports various profiles. The following are the types of user profiles relevant in this integration.

Adobe Admin Console System Admin Responsible for setting up identity concepts for the Adobe org and the Marketo Engage product in the Adobe Admin Console. Granted role at Adobe organization setup.
Adobe Admin Console Product Admin Responsible for entitling users for the Marketo Engage product in the Adobe Admin Console. Granted role in Adobe Admin Console.
Adobe Admin Console Product Profile Admin Responsible for administering users within a product profile. They cannot manage users outside of that specific profile. A product profile admin does not have access to the Marketo application unless added to the product profile as a user. Their role would be still a standard user (default workspace if have more than one workspace).
Marketo Engage Product Admin A person who has been given access to Marketo Engage with Administrative privileges. Granted role in Marketo Engage, not Adobe Admin Console.
Marketo Engage User A person who has been given access to Marketo Engage. No Administrative privileges.

FAQ

What is Adobe Identity?

Adobe Identity Management System consists of three components.

  • Adobe Identity Service: Handles authentication and validation of the end-user, including federation and runtime Single-Sign-On (SSO).

  • Adobe Admin Console: The Admin Console provides a central location for managing Adobe entitlements across your entire organization. It handles user management, cloud service, desktop license entitlement, federation configuration, and provides data loss prevention security features.

  • Adobe User Management API (UMAPI): Allows organizations to manage enterprise users and entitlements in the Adobe Admin Console at the API level.

When will existing Marketo Engage subscriptions be integrated with IMS?

Existing Marketo subscriptions will be migrated to the Adobe Identity Management System later this year. Marketo Support will not be able to provide any updates regarding Adobe IMS migration. Your Customer Success Manager will reach out with the estimated timeline in the coming months.

What’s the difference between an Adobe Product Admin and a Marketo Engage Admin?

  • Adobe Product Admin is a new role in the Marketo platform.
  • Adobe Product Admin role is granted to users added as a Product Admin in Adobe Admin Console
  • Adobe Product Admin is a read-only role and can’t be edited or deleted from Marketo Engage.
  • Adobe Product Admin has the same rights and privileges as a standard Marketo Admin.
  • Marketo Engage Admin’s role is still an Admin and is granted to a user in Marketo Engage.

Is there any change in User Management API client support?

Yes. Those who’ve been onboarded to Adobe IMS cannot utilize all the existing Marketo User Management APIs. For user invite, update, and deletion actions, the Adobe IMS APIs should be used. For role management, the Marketo User Management APIs still apply. Beyond this there are no other changes to Marketo REST API client support.

Who do we contact for support if we are integrated with IMS?

You would follow the standard procedure for contacting Marketo Support.

If I use an Adobe Identity to access other Adobe applications, can I use that to access Marketo?

Even if you have other Adobe products, you cannot access Marketo with Adobe Identity until the subscription is migrated to IMS.

Are Marketo user roles (within workspaces) managed in Adobe Admin Console?

No. User Role management (within workspaces) is completed in Marketo Engage.

I’m a Marketo Admin in an IMS integrated subscription and don’t have access to the Admin Console. How do I gain access?

Any Adobe System or Product Admin that has access to your organization’s Admin Console can give you access. If you’re not sure who in your organization has admin privileges in the console, contact Adobe Customer Care.

How would an Admin add users to Marketo Sales Connect?

While there will be a product card in Admin Console for Sales Connect, Admin Console should not be used to add/manage users. The following link will allow Admins to manage users via Marketo Sales Connect: https://toutapp.com/next#settings/admin/user-management.

Where can I learn more about the Adobe Admin Console?

https://helpx.adobe.com/enterprise/admin-guide.html.

Do I still go to the Admin section in Marketo to make user account changes for my account?

No, you would need to navigate to account.adobe.com.

How does this work with Marketo’s Universal ID?

Those onboarded to Adobe identity can access all IMS-enabled subscriptions seamlessly via the subscription switcher in the product.

Does this work with SSO?

Yes. Marketo integration with Adobe IMS supports Universal ID users and SSO. SSO is now driven by Adobe IMS and is set up at the organization level in the Adobe Admin Console. Learn more here.

How does device authorization work?

Adobe IMS does not currently support anything like Marketo’s device authorization feature.

Is it still possible to use the “Login in Invite User Dialog” feature, to make a user’s login unique from their email?

No. The User Invite workflow is no longer active when a subscription is IMS-enabled, so the feature is no longer valid. Adobe identity requires a user’s identity to be driven by their email.

For Adobe IMS, do we have the option to use Adobe ID, Enterprise ID, or Federated ID?

Yes, you determine the type of identity to have your organization support. More info can be found here: Identity Overview and here: Set up Identity.

On this page