You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/pages/guides/authentication/JWT/index.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
3
3
<InlineAlertslots="text"/>
4
4
5
-
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jan 27, 2025. You must migrate to the new credential by **Jan 27, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
5
+
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jun 30, 2025. You must migrate to the new credential by **Jun 30, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
6
6
7
7
To establish a secure service-to-service Adobe I/O API session, you must create a JSON Web Token (JWT) that encapsulates the identity of your integration, and then exchange it for an access token. Every request to an Adobe service must include the access token in the `Authorization` header, along with the API Key (Client ID) that was generated when you created the [Service Account Integration](../service-account-integration.md) in the [Adobe Developer Console](https://developer.adobe.com/console/).
Copy file name to clipboardExpand all lines: src/pages/guides/authentication/JWT/jwt-certificate.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@
3
3
4
4
<InlineAlertslots="text"/>
5
5
6
-
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jan 27, 2025. You must migrate to the new credential by **Jan 27, 2025**, to ensure your application continues functioning. [Learn more](../ServerToServerAuthentication/migration.md).
6
+
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jun 30, 2025. You must migrate to the new credential by **Jun 30, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
7
7
8
8
Create a private key and a public certificate. Make sure you store these securely.
Copy file name to clipboardExpand all lines: src/pages/guides/authentication/JWT/samples.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@
3
3
4
4
<InlineAlertslots="text"/>
5
5
6
-
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jan 27, 2025. You must migrate to the new credential by **Jan 27, 2025**, to ensure your application continues functioning. [Learn more](../ServerToServerAuthentication/migration.md).
6
+
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jun 30, 2025. You must migrate to the new credential by **Jun 30, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
7
7
8
8
The following samples demonstrate JWT generation and exchanging it with Adobe IMS endpoint to retrieve an access token.
Copy file name to clipboardExpand all lines: src/pages/guides/authentication/JWT/scopes.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@
3
3
4
4
<InlineAlertslots="text"/>
5
5
6
-
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jan 27, 2025. You must migrate to the new credential by **Jan 27, 2025**, to ensure your application continues functioning. [Learn more](../ServerToServerAuthentication/migration.md).
6
+
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jun 30, 2025. You must migrate to the new credential by **Jun 30, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
7
7
8
8
JSON Web Token (JWT) metascopes govern the access and privileges for service accounts. As an application developer, you will choose the set of scopes to access certain resources by specifying the scopes as part of the encoding claims for your JWTs.
In May 2023, Adobe announced the deprecation and end of life of Service Account (JWT) credentials. This means that any of your integrations or custom applications using a Service Account (JWT) credential will need to migrate to the new OAuth Server-to-Server credential before January 27, 2025.
20
+
In May 2023, Adobe announced the deprecation and end of life of Service Account (JWT) credentials. This means that any of your integrations or custom applications using a Service Account (JWT) credential will need to migrate to the new OAuth Server-to-Server credential before Jun 30, 2025.
20
21
21
22
22
23
@@ -31,23 +32,23 @@ A credential is used to uniquely identify your integration to Adobe. To use an A
31
32
32
33
### Will my Adobe integrations or applications stop working immediately?
33
34
34
-
No. Any integration or application using the Service Account (JWT) credential will continue to work until January 27, 2025. See [deprecation timelines](./migration.md#deperecation-timelines). See section on [migration next steps](#migration-next-steps).
35
+
No. Any integration or application using the Service Account (JWT) credential will continue to work until June 30, 2025. See [deprecation timelines](./migration.md#deperecation-timelines). See section on [migration next steps](#migration-next-steps).
35
36
36
37
37
38
38
39
### What is the deadline to migrate to the new credential?
39
-
You must migrate your application to use the new OAuth Server-to-Server credential before January 27, 2025, to ensure your application does not face any downtime. See [migration guide](./migration.md).
40
+
You must migrate your application to use the new OAuth Server-to-Server credential before June 30, 2025, to ensure your application does not face any downtime. See [deprecation timelines](./migration.md#deperecation-timelines). See [migration guide](./migration.md).
40
41
41
42
42
43
43
-
### What happens if we do not migrate our application by Jan 27, 2025?
44
-
45
-
Projects on the Developer Console still containing any Service Account (JWT) credentials will be 'frozen' after January 27, 2025. This will disable certificate rotation for your application or any other action to modify the Project or the credential. The ability to migrate will, however, still be available. Once you migrate your application, the Project will be 'unfrozen' again.
44
+
### What happens if we do not migrate our integration by Jun 30, 2025?
46
45
46
+
After June 30, 2025, you can no longer refresh certificates for integrations using Service Account (JWT) credentials. Your integration will stop working once existing certificates expire.
47
47
48
+
Furthermore, Adobe will automatically convert Service Account (JWT) to OAuth Server-to-Server credentials when certificates expire or on March 1, 2026, whichever comes first.
48
49
49
50
### We can currently create new Service Account (JWT) credentials even though they are marked as deprecated. Is it recommended?
50
-
No. Creating any new Service Account (JWT) credentials is not recommended. All Service Account (JWT) credentials, whether old or new, will stop working after January 27, 2025. We recommend you avoid migrating your application again and use the new OAuth Server-to-Server credential from the beginning. See our [implementation guide](./implementation.md).
51
+
No. Creating any new Service Account (JWT) credentials is not recommended. All Service Account (JWT) credentials, whether old or new, will stop working after June 30, 2025. We recommend you avoid migrating your application again and use the new OAuth Server-to-Server credential from the beginning. See our [implementation guide](./implementation.md).
51
52
52
53
53
54
@@ -152,11 +153,19 @@ The company or organization that developed the integration must add support to u
152
153
153
154
154
155
### We are a company or organization that develops applications using Service Account (JWT) credentials that Adobe customers install. What do we need to do?
155
-
Until June 3, 2024, customers can still create Service Account (JWT) credentials to use your application. However, any existing or new customers of your application must switch to using the new OAuth Server-to-Server credentials before January 27, 2025.
156
+
Until June 3, 2024, customers can still create Service Account (JWT) credentials to use your application. However, any existing or new customers of your application must switch to using the new OAuth Server-to-Server credentials before June 30, 2025.
156
157
157
158
Therefore, we recommend enhancing your application before June3, 2024. You must add support to use the new credential and support for customers to migrate from the old credential to the new credential.
158
159
159
160
161
+
## Migrating Auto-generated projects
162
+
163
+
### Do we need to migrate auto-generated projects?
164
+
No. Adobe will migrate all auto-generated projects without needing your action. However, you may be required to upgrade the version of your Adobe Experience Manager (AEM) or Adobe Campaign as a pre-requisite.
165
+
166
+
### When will Adobe migrate auto-generated projects?
167
+
Adobe will migrate all auto-generated projects before Jun 30, 2025.
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jan 27, 2025. You must migrate to the new credential by **Jan 27, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
54
+
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jun 30, 2025. You must migrate to the new credential by **Jun 30, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
55
55
56
56
Service Account (JWT) credentials rely on the JWT token exchange mechanism to generate access tokens. This credential's details include two secrets a `client_secret` and a `private.key` (part of a public certificate private key pair).
Copy file name to clipboardExpand all lines: src/pages/guides/authentication/ServerToServerAuthentication/migration.md
+26-21Lines changed: 26 additions & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,29 +1,27 @@
1
1
# Migrating from Service Account (JWT) credential to OAuth Server-to-Server credential
2
2
3
-
The Service Account (JWT) credentials have been deprecated in favor of the new OAuth Server-to-Server credentials.
3
+
The Service Account (JWT) credentials have been deprecated in favor of the new OAuth Server-to-Server credentials. They will reach end of life on June 30, 2025.
4
4
5
5
The new OAuth Server-to-Server credentials simplify all aspects of application development - experimentation, implementation, and maintenance. See the section on [Why OAuth Server-to-Server credentials?](#why-oauth-server-to-server-credentials) below to learn more.
6
6
7
-
While the Service Account (JWT) credentials have been marked as deprecated, they will continue to work until **Jan 27, 2025**. Therefore you must migrate your application or integration to use the new OAuth Server-to-Server credential before Jan 27, 2025. See the section on [deprecation timelines](#deperecation-timelines) below to learn more.
7
+
While the Service Account (JWT) credentials have been marked as deprecated, they will continue to work until **Jun 30, 2025**. Therefore you must migrate your application or integration to use the new OAuth Server-to-Server credential before Jun 30, 2025. See the section on [deprecation timelines](#deprecation-timelines) below to learn more.
8
8
9
9
Migrating your applications to the OAuth Server-to-Server credential is a simple two-step process that enables a zero downtime migration for your applications and integrations. Please read our [migration guide](#migration-overview) below to familiarize yourself with the migration process.
10
10
11
11
If you have more questions, check out our [frequently asked questions](#faqs) or visit the Adobe Developer Console [forums](https://experienceleaguecommunities.adobe.com/t5/adobe-developer-console/ct-p/adobe-io-console).
12
12
13
13
## Table of Contents
14
14
15
-
-[Migrating from Service Account (JWT) credential to OAuth Server-to-Server credential](#migrating-from-service-account-jwt-credential-to-oauth-server-to-server-credential)
-[Preparation: Find out which applications are using the Service Account (JWT) credentials](#preparation-find-out-which-applications-are-using-the-service-account-jwt-credentials)
21
-
-[Step 1: Add the new credential to your project](#step-1-add-the-new-credential-to-your-project)
22
-
-[Step 2: Update your application and delete old credential](#step-2-update-your-application-and-delete-old-credential)
23
-
-[Update your application](#update-your-application)
24
-
-[Test if the new credential is working](#test-if-the-new-credential-is-working)
25
-
-[Delete the old credential](#delete-the-old-credential)
+[Preparation: Find out which applications are using the Service Account (JWT) credentials](#preparation-find-out-which-applications-are-using-the-service-account-jwt-credentials)
19
+
+[Step 1: Add the new credential to your project](#step-1-add-the-new-credential-to-your-project)
20
+
+[Step 2: Update your application and delete old credential](#step-2-update-your-application-and-delete-old-credential)
21
+
+[Update your application](#update-your-application)
22
+
+[Test if the new credential is working](#test-if-the-new-credential-is-working)
23
+
+[Delete the old credential](#delete-the-old-credential)
24
+
+[Cancelling Migration](#cancelling-migration)
27
25
28
26
29
27
## Why OAuth Server-to-Server credentials?
@@ -44,16 +42,23 @@ Lastly, while the new OAuth Server-to-Server credentials do not use expiring cer
44
42
45
43
## Deprecation Timelines
46
44
47
-
48
45
<InlineAlertslots="text"/>
49
46
50
-
Your applications using the Service Account (JWT) credentials will stop working after Jan 27, 2025.
47
+
The end of life date for Service Account (JWT) credentials has been extended from Jan 27, 2025, to Jun 30, 2025, to give customers more time to migrate. You must migrate your integrations to use OAuth Server-to-Server credentials before June 30, 2025 to avoid any downtime.
48
+
49
+
50
+
1.**May 1, 2023**
51
+
* Adobe announces the deprecation of Service Account (JWT) credentials. The deprecation timelines and the end-of-life date are also announced.
52
+
* All existing integrations using Service Account (JWT) credentials continue to work.
53
+
54
+
2.**June 3, 2024**
55
+
* After June 3, 2024, you cannot create new Service Account (JWT) credentials.
56
+
* All existing integrations using Service Account (JWT) credentials continue to work.
51
57
58
+
3.**June 30, 2025 (End of Life)**
59
+
* After June 30, 2025, you cannot refresh certificates for integrations using Service Account (JWT) credentials. Your integrations will stop working once existing certificates expire.
60
+
* Furthermore, Adobe will automatically convert Service Account (JWT) credentials to OAuth Server-to-Server credentials when certificates expire or on March 1, 2026, whichever comes first.
52
61
53
-
|| May 1, 2023 - Jun 2, 2024 | Jun 3, 2024 - Jan 26, 2024 | Jan 27, 2025 (end of life) |
| Existing applications using a Service Account (JWT) credential | Existing applications using the Service Account (JWT) credential will continue to work. | Existing applications using the Service Account (JWT) credential will continue to work. |**Existing applications cannot refresh expiring certificates after Jan 27, 2025, and will stop working**. |
56
-
| New applications creating a Service Account (JWT) credential | A new Service Account (JWT) credential can be added to the project. | A new Service Account (JWT) credential **cannot** be created or added to the project. | A new Service Account (JWT) credential **cannot** be created or added to the project. |
57
62
58
63
## Migration Overview
59
64
@@ -71,7 +76,7 @@ To find out which of your Adobe applications and integrations are using the Serv
71
76
72
77
Perform the steps below for each application/project you have identified. If a project is not in use, we recommend deleting the project or the Service Account (JWT) credential in the project.
73
78
74
-
Note: you do not have to worry about auto-generated projects. Adobe will automatically migrate those during the migration window.
79
+
Note: you do not have to worry about auto-generated projects. Adobe will automatically migrate all auto-generated projects before June 30, 2025.
75
80
76
81
### Step 1: Add the new credential to your project
Copy file name to clipboardExpand all lines: src/pages/guides/authentication/index.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -48,7 +48,7 @@ View our guide on server to server authentication credentials -
48
48
49
49
<InlineAlertslots="text"/>
50
50
51
-
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jan 27, 2025. You must migrate to the new credential by **Jan 27, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
51
+
The Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jun 30, 2025. You must migrate to the new credential by **Jun 30, 2025**, to ensure your application continues functioning. [Learn more](./ServerToServerAuthentication/migration.md).
Copy file name to clipboardExpand all lines: src/pages/guides/authentication/service-account-integration.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
3
3
<InlineAlertslots="text"/>
4
4
5
-
Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jan 27, 2025. **You must migrate to the new credential by Jan 27, 2025 in order to ensure your application continues to function. View our [migration guide](../authentication/ServerToServerAuthentication/migration.md) to know more.**
5
+
Service Account (JWT) credentials have been deprecated in favor of the OAuth Server-to-Server credentials. Your applications using the Service Account (JWT) credentials will stop working after Jun 30, 2025. **You must migrate to the new credential by Jun 30, 2025 in order to ensure your application continues to function. View our [migration guide](../ServerToServerAuthentication/migration.md) to know more.**
6
6
7
7
A Service Account connection allows your application to call Adobe services on behalf of the application itself or on behalf of an enterprise organization.
0 commit comments