Migrate Campaign operators to Adobe Identity Management System (IMS) migrate-users-to-ims

As part of the effort to reinforce security and authentication process, Adobe Campaign highly recommends to migrate end user authentication mode from the login/password native authentication to Adobe Identity Management System (IMS). All operators should implement Adobe Identity Management System (IMS) to connect to Campaign.

Learn more about this migration in this page.

What changed? move-to-ims-changes

With Campaign Classic, all regular users can already connect to the Adobe Campaign client console using their Adobe ID, through Adobe Identity Management System (IMS). However, user/password connections are still available. This will no longer be permitted with Campaign v8.

In addition, as part of the effort to reinforce security and authentication process, Adobe Campaign client application now calls Campaign APIs directly using the IMS technical account token. Migration for technical operators is detailed in a dedicated article, available in this page.

This change is already applicable in Campaign Classic v7, and will be mandatory to move to Campaign v8.

Adobe supports you in this migration effort. You can find detailed context and step by step guidelines in the below article.

Are you impacted? migrate-ims-impacts

This procedure applies to all Campaign users which are not already connecting to Campaign with their Adobe ID.

If operators in your organization are connecting to Campaign client console using their login/password (aka. native authentication), you are impacted, and should migrate these operator(s) to Adobe IMS as detailed below.

Migration to Adobe Identity Management System (IMS) is a security imperative to make your environments secure and standardized, as most of the other Adobe Experience Cloud solutions and apps are already on IMS.

This change is applicable starting Campaign Classic v7.4.1 (and latest IMS migration compatible versions) and is mandatory to move to Adobe Campaign v8.

IMPORTANT
Control Panel access impact
Once you migrate your users to IMS, be aware that any Product Profile in the Adobe Admin Console containing the word “admin” in its name (such as “Administrators”, “admin”, “admins”, “approval admin”, etc.) will automatically grant access to the Campaign Control Panel. Control Panel is a self-service tool that allows making significant changes to Campaign instances.
Carefully review your Product Profile naming conventions to ensure only authorized users have access to Control Panel. Learn more about managing Control Panel permissions in the Control Panel documentation.

How to migrate Hybrid and On-premise environments? ims-migration-procedure-on-prem

Key steps for this migration are listed below:

  1. Upgrade your environments to Campaign v7.4.1 (or an IMS migration compatible version).
  2. After the upgrade, you can still create new users with both methods, as native user or with IMS.
  3. Your internal Campaign Administrator must configure Adobe IMS as detailed in this section.
  4. Then add unique emails to all native users on the Campaign client console. This step is detailed in this section (Campaign v8 documentation).
  5. Create users and product profiles in Adobe Admin Console as detailed in Campaign v8 documentation.
  6. Enable the Connect with Adobe ID option for all operators.
  7. Implement Adobe IMS for your connection as detailed in this page.

You can also migrate your technical operator(s) to Adobe Developer Console as detailed in this technote.

Frequently Asked Questions ims-migration-faq

For answers to common questions about the migration (creating users after the migration, adding emails for native users, logging in via IMS, downtime, organizations already using IMS, viewing the operators’ authentication type), refer to the Campaign v8 technote (Campaign v8 documentation).

recommendation-more-help
campaign-classic-help