Adobe Experience Manager Sites

Hey Guys, We have a domain abc.com which is managed by the client.We have uploaded the customer managed certificate but the domain is still not getting verified. The setup works correctly as the requests hit on domain abc.com are served by AEM Publisher.The setup uses WAF which has rewrites configured to valid AEM Publishers with X-Forwarded-Host header set to abc.com and correct X-AEM-Edge-Key configured. However, when we navigate to the "Domain Settings" we see the below domain as "Not Verified"Same under "Domain Mappings" we see the following - Interesting observation is we have already configured the steps mentioned in "Go Live" - a. Configure A Record - Login to your Domain Registrar and create an A record to point to all the IP addresses listedb. Configure CName - Add "cdn.adobeaemcloud.com" CNAME record on abc.com. However in out case the cdn.adobeaemcloud.com didn't work. We had to configure the publisher "publish-p<pid>-e<eid>.ado

we have some sites where we are using closed user groups feature and SAML for authentication.We authored few vanity urls to the pages which has cug. When we try to hit the vanity urls it is redirecting to 404. Dispatcher rules are as follows: we have a rule for shorten URL path. # Shorten the tenant pathRewriteRule ^/content/xyz/abc/c1/(.*)$ /$1 [NE,L,R=301]#prefix with tenant root pathRewriteRule ^/(.*)$ /content/xyz/abc/c1/$1 [PT,L] we have enabled,farm:/vanity_urls {/url "/libs/granite/dispatcher/content/vanityUrls.html"/file "/tmp/vanity_urls"/delay 300} we have denied the urls in cache. /0003 {/glob "/libs/granite/dispatcher/content/vanityUrls.html"/type "deny"}and enabled in Filter. #Allow Vanity URLs /0205 { /type "allow" /url "/libs/granite/dispatcher/content/vanityUrls.html"}Can we use Vanity URLS with Closed User groups in AEMasCS ? If yes, please provide the steps. 

hi,I want to hide Site. Projects, Experience Fragments icons in AEM 6.5 for a user group and only Assets icon should be displayed for them how can I do that. It will be very helpful if I can get any suggestions on this. thank you 

If I rename a tag value in the AEM Tag Console in AEM Cloud, and the original tag value has been referenced in pages and content fragments: 1) Does the value get automatically updated in the referenced pages and content fragments?2) Is there a need to republish the pages, or does AEM take care of it?3) If it republishes automatically, how can we ensure that only live pages get published and not the pages in the draft mode? Thanks,Shashank

We're experiencing a problem with the rollout functionality where deselecting specific locales in the rollout dialog has no effect. Changes are still applied to all live copy pages, including those that were explicitly unchecked. AEM Version: 6.5.13 Steps to reproduce:Visit http://localhost:4502/editor.html/content/we-retail/language-masters/en/experience.htmlChange some of the text in the hero (e.g: `Experiences` -> `Experiences Test`)Go to the rollout screen for the pageDeselect rolling out to `/content/we-retail/ca/en/experience`Perform the rolloutVisit http://localhost:4502/editor.html/content/we-retail/ca/en/experience.htmlSee that the Hero text has changed even though that page was unchecked on the rollout screenExpected results:Only the selected locales should receive the updates. Unchecked locales should be excluded from the rollout.When I look at the request that's made to the server, I don't see anything related to what's checked or unchecked in the pay

For pagination can we avoid using #1 after the page URL. For eg -/abc.html#1instead have structure like this/abc/page/1  or /abc/?page=1  or /abc/page/1.html. with results maybe from 1 -10 in first page 

I'm new to AEM. I need to replace some assets that AEM considers "Invalid" due to their large width or size.However, when I try to download this "invalid asset," I receive a 404 error.Has anyone encountered this error before?  

I’m working on an AEM workflow where I want to assign a task dynamically to the user who completed the previous participant step using the OOTB Dynamic Participant Step with the option:"Assigns to previous task completer"Here’s the structure of my workflow:Participant Step 1 → Assigned to User A (e.g., qauser)Participant Step 2 → Assigned to User B (e.g., designuser)Dynamic Participant Step → Configured with “Assigns to previous task completer”Expected Behavior:The Dynamic Participant Step should be assigned to User B (the last user who completed a task) — in this case, designuser.ISSUE :Even though User B (designuser) successfully completes Participant Step 2, the Dynamic Participant Step gets assigned to admin, not designuser.What I’ve already tried:Ensured the workflow was started by qauser, not adminConfirmed each participant step was completed by the correct userVerified the workflow history: the correct users are completing the stepsAll steps are standard Participant Steps, not c

We recently had a security assessment that identified brute force vulnerabilities on our dispatcher URL. The assessment showed 190 consecutive login attempts were possible without any blocking mechanisms on /libs/granite/core/content/login.html.As an immediate mitigation, I'm planning to add these Dispatcher deny rules to block direct access to authentication endpoints:  /0300 { /type "deny" /url "/system/sling/login" }/0301 { /type "deny" /url "/system/sling/logout" }/0302 { /type "deny" /url "/libs/granite/core/content/login*" }/0303 { /type "deny" /url "/login*" }/0304 { /type "deny" /url "*/j_security_check*" }/0305 { /type "deny" /url "/j_security_check*" }Are these Dispatcher rules appropriate for blocking brute force attempts on AEM login endpoints?Will blocking /libs/granite/core/content/login.html break any legitimate AEM functionality?What additional AEM-specific configurations can help with brute force protection (rate limiting, account lockout, etc.)?Has anyone im

I would like to establish a user assigned managed identity with my azure subscription which has access to various resources (namely, a keyvault). How do I configure Federated Identity Credentials on this managed identity such that AEMaaCS can leverage it to communicate with my azure resources? Alternatively, is there any way to connect AEMaaCS to Azure Services without a Client Secret or pinned Client Certificate?

Hey folks,I have been trying to set up the universal editor on my local machine to perform authoring of my blocks. I have some custom blocks developed, and for now, I author them on the AEM cloud's Universal editor and publish the demo page to check for any authoring changes on my local ( which has been started by the 'aem up' command ). Yes, I can see any change I make regarding the decoration of these blocks on the go, but to make a change in the content, I need to update it on the Dev instance of my AEM Cloud Service. Then the same content is proxied in my local through the local ( by the grace of 'aem up' ). But is there any way I can make this change on my local and see the changes instantly? Does the underlying architecture allow for doing so?If anybody has an idea of how to solve this problem, please let me know. And there was an article by Adobe to set up a universal editor locally for React apps, I have followed the steps. Running Your Own Universal Editor Service |

Hi Everyone,I am currently working on Adobe Experience Manager 6.5.17 and implementing a custom EventHandler to listen for page deletion events using the PageEvent.EVENT_TOPIC.Here’s a snippet of my code:@8220494(service = EventHandler.class,immediate = true,property = {EventConstants.EVENT_TOPIC + "=" + PageEvent.EVENT_TOPIC})public class PageDeletionEventHandler implements EventHandler {private static final Logger LOG = LoggerFactory.getLogger(PageDeletionEventHandler.class);@9944223public void handleEvent(Event event) {LOG.info("Received event: {}", event.getTopic());PageEvent pageEvent = PageEvent.fromEvent(event);for (PageModification mod : pageEvent.getModifications()) {if (mod.getType() == PageModification.ModificationType.DELETED) {LOG.info("Page deleted at path: {}", mod.getPath());}}}} The handleEvent method is triggered correctly for CREATED and MODIFIED events - but not for DELETED events when I delete pages via the AEM Sites console.The bundle is active, the component

Uncaught TypeError: Cannot read properties of null (reading 'innerText')at HTMLElement._onOverlayToggle (coralui3.js:940:484)at Vent._executeListenersAtElement (coralui3.js:249:294)at Vent._executeBubbleListeners (coralui3.js:252:219)at Coral.Component.trigger (coralui3.js:354:7)at openComplete (coralui3.js:399:29)at coralui3.js:399:143 I am getting this issue when accessing dropdown in authoring field ,any one suggest the solution for this

carousel panel item name issue:i have inherited carousel component and created custom component and carousel panel select is impacted.custom component panel select is only showing child component name only for children's.but core component is showing child component name : item name for children's.i debugged the issue.. when i change custom component jcr title and component name to carousel, it shows proper name in panel select.can anyone suggest what exactly its happening.

Hello Community,I have created RepoInit scripts to create a service user and grant specific permissions. However, for some reason, I am unable to predict the behavior of the granted permissions. Initially, when the script was deployed to the instance, I observed the following permissions in the content repository:Read: YesModify: NoCreate: YesDelete: YesAfter several deployments (with no changes made to the script), I started noticing errors in the logs. Upon checking the permissions in the UserAdmin Console, I saw that the "Create" permission was no longer enabled. The updated permissions were:Read: YesModify: NoCreate: NoDelete: YesHere is the error log that I encountered: ERROR LOG: 2025-07-30 21:25:50.721 ERROR [com.xxx.yyy.aem.core.internal.impl.models.zzzz] RepositoryException while interacting with JCR: /content/project1/en/jcr:content/root/responsivegrid/layout_container_cop/content/layout_container_169/content/layout_container_108/c

Hi all, Let us say my component works fine on Author, but fails on Publish. What are all the ways to debug? I am aware of debug logging and also monitoring network tab using Developer tools.Is looking at the bundles in Felix to see whether bundle is active an option on Publish? Appreciate all your responses, Thanks,RK.

Hi all, Let us say I have created an Experience Fragment. When clients with different view ports require and request it, how AEM sends the right variant of it?Based on client view port the experience and Experience Fragment should be different. So, AEM creates Experience Fragments for each of view port sizes?How does it know which variant should be served for which client? Appreciate all your responses, Thanks,RK.

Hi, 6.5 SP22 on prem user here. I am tasked to audit document files (30k+). My approach is to export a file report, then sort by used who uploaded, then modified. Then send a list of files to the user asking to audit their files. The challenge here is - I only want to first see the document files that are not referencing to websites.  Question:1. Can I add a property in the File Report that would display if the file is referencing or not (similar to what Renovator exports)?2. If above is No, what other report can I use / create that will show: Filepath, Uploader, Modifier, Referencing or Not? This has to be a UI solution please.  Thanks 

For one of my poc, I am planning to setup commerce cockpit and CIF components and I want to use Venia commerce store to setup(https://venia.magento.com/). I have downloaded and installed the package from https://github.com/adobe/aem-cif-guides-venia. I am trying to setup cloud config Here is my com.adobe.cq.commerce.graphql.client.impl.GraphqlClientImpl configGraphQL Service Identifier - https://venia.magento.com Commerce Cloud ConfI guess I should update "Catalog Root Category Identifier" . Does anyone know what should be the value for this field ?

Hi all, Let us say my site is integrated with SSO IDP Okta. When use logs in, IDP's login page appears and IDP collects user id and password.IDP authenticates and sends only token to AEM.1. From then for each of the requests from that client how the token is utilized?2. Where is the token stored or passed?3. How is the token mapped to the user? For that user AEM/IDP should not ask for user name and password. Appreciate all your responses, Thanks,RK.

Hello We have a node under each page with the same name. When we create a launch for the page the node also get created in the launch.On Launch promotion we do not want the information of this node to be promoted back to page as the information on this node might have been updated on page and we do not want it to be overridden.Any suggestions how we can achieve this?

I'm working with a custom AEM component that includes the Core Image component (core/wcm/components/image/v3/image) inside it. The component renders correctly and includes the data-cmp-data-layer attribute for anchor tag (for Adobe Data Layer) in some sites, but not in others, even though the component and content were cloned from a working site.For example:In /content/mysite, the image renders inside an <a> tag and includes the data-cmp-data-layer attribute.In /content/clonedsite, the exact same component and authored image show no data-cmp-data-layer attribute in the DOM.And if changes site name to some other names, for some names its working.What I Checked So Far:The cq:dataLayer = true property is present in the template policies for both sites.The image component has the correct sling:resourceType = core/wcm/components/image/v3/imageThe <a> tag wraps the image in both places, but data-cmp-data-layer is missing only in the broken ones.No JS errors in the browser console

Hi, Upon deletion of asset resource, I need to retrieve a property from the resource before it becomes null.I tried this using an Event Listener, Event Handler, ResourceChangeListener, setting up a workflow triggered by a launcher upon deletion, SlingFilter but the resource is null in all these cases. Is there any way other than overlaying Delete Button and obtain the resource details  before asset  is deleted? We are using AEM6.5. TIA.@arunpatidar @santoshsai @estebanbustamante