Access denied error when making REST API calls to Adobe Campaign Message Center

REST API calls to Adobe Campaign Message Center fail with the error “XTK-170019 Access denied”, even when you’ve already added the testing IP addresses to the allowlist. This happens because all public IP addresses involved in the request path must be added to the allowlist, including those used by proxies or load balancers. To fix this, identify every public IP involved in the call flow and add each one to the allowlist in the Control Panel.

Description description

Environment

Adobe Campaign v8

Issue/Symptoms

  • REST API calls to Adobe Campaign Message Center return “XTK-170019 Access denied”.
  • Access is denied even after whitelisting the source IPs in the Control Panel.
  • The issue occurs for some VPN connections but not others.

Resolution resolution

To solve the issue, follow these steps:

  1. Identify all public IP addresses involved in sending REST API requests, including those used by proxies, load balancers, or routing layers such as mc.adobe.io.
  2. Add each identified IP address to the allowlist in the Adobe Campaign Control Panel.
  3. Retry a REST API request to confirm that access is granted.

Note: Requests routed through VPNs, proxies, or load balancers can originate from different public IPs than expected. Make sure all of these IPs are included in the allowlist.

recommendation-more-help
3d58f420-19b5-47a0-a122-5c9dab55ec7f