Product Communities

SSO (SAML) breaks after an in-place upgrade to AEM 6.5.25 (CFP-25) Environment: on-premise AEM Author, upgraded from 6.5.10 to 6.5.25.Immediately after applying CFP-25, every SSO-related decrypt operation fails with:javax.crypto.BadPaddingException: pad block corruptedThis appears to break decryption of the SAML keystore/truststore passwords and replication transport passwords. As a result, SSO fails and the CMS becomes inaccessible, except by disabling SAML authentication and using the manual login route. The master key is stored in the JCR under /etc/key; it was never migrated to the filesystem bundle. The key value itself was not changed during the upgrade. I simply installed the CFP package, waited until it was complete and restarted the instance, as per the instructions.  The workaround that resolved the issue (currently on test environments) was to rewrite the stored /etc/key value from the older obfuscated format to the raw value, so the newer crypto bundle could read it correct

I am trying to subtract a system property call {estimate} and a custom field called Actual Points.  Both properties display correctly using these 2 text mode pieces of code:displayname=Actual Pointslinkedname=resolveProjectnamekey=view.relatedcolumnnamekeyargkey.0=resolveProjectnamekeyargkey.1=Actual Pointsquerysort=DE:resolveProject:Actual Pointsvaluefield=resolveProject:Actual Pointsvalueformat=customDataLabelsAsStringaggregator.displayformat=valaggregator.function=SUMaggregator.namekey=estimateaggregator.valuefield=estimateaggregator.valueformat=valdisplayname=Agile Assigned Pointslinkedname=directnamekey=estimatevaluefield=estimatevalueformat=doubleAsDoubleBut I can’t figure out why I get a blank column when I try to subtract them using this syntax:displayname=Difference +/-linkedname=resolveProjectnamekey=view.relatedcolumnnamekeyargkey.0=resolveProjectnamekeyargkey.1=Actual Pointsquerysort=DE:resolveProject:Actual Pointsvalueexpression=SUB({estimate},{DE:resolveProject:Actual Poi

Hi everyone,I’m currently working on setting up an Edge Delivery Services (EDS) site using an Adobe repository and would appreciate some guidance.My goal is to: Set up a new EDS project using the official Adobe repository Configure the required integrations to create and load the website using AEM Sites authoring Create pipelines, deploy the site, and preview content I’ve gone through the documentation, but most of the references are based on using a public GitHub repository. In my case, I’m working with a private repository (Adobe repo).At the moment, I’m facing an issue with site ownership verification. Even after adding the required verification file, the verification is not successful. Currently, my repository only contains this verification file and does not yet include files like fstab.yaml or other standard EDS configuration files.It would be really helpful to understand the correct approach for private repository setups, EDS site creation, especially around ownership verifi

Hi,I am having some difficulties understanding the documentation regarding event reactions.I have added an event reaction “clicked” with a following email to those who have clicked. If I add an event timeout of 7 days, will the email to those who clicked wait 7 days before being sent? Or will the email be sent immediately when someone clicks? 

Hi everyone,I'm looking for guidance on the recommended approach for securely storing OAuth access tokens in AEM as a Cloud Service.We're evaluating different options for storing an access token that is used for outbound API integrations. The approaches we're considering include:In-memory cache: This avoids persistent storage, but since AEM as a Cloud Service runs multiple author/publish pods, each pod maintains its own cache. As a result, a pod without the token may need to perform an additional OAuth token request. JCR storage under /var: Store the encrypted access token under /var with appropriate ACLs and access it only through a dedicated service user.I'd like to understand:Which of these approaches is generally recommended for AEM as a Cloud Service? Are there Adobe-recommended best practices for securely storing and managing OAuth access tokens? Has anyone implemented a different approach that works well in a cloud-native, multi-pod AEM environment?Any guidance, recommendations,

we are trying to create a destination sdk to swoogo faccing issue which authentication type to use had tried OAuth 2 with Client Credentials Grant it is not working please suggest what kind of customerauthentication to be used for these destination .below for swoogo request api token for refernce :https://swoogo.readme.io/reference/post_oauth2-tokenSwoogo Api:https://swoogo.readme.io/reference/updatecontactthese was used in our config json it was not working: "customerAuthenticationConfigurations": [   {      "authType": "OAUTH2",      "grant": "OAUTH2_CLIENT_CREDENTIALS",      "accessTokenUrl": "https://api.swoogo.com/api/v1/oauth2/token",      "clientId": "XXXXX",      "clientSecret": "XXXXXXXXXXXXXX",      "options": {        "useBasicAuth": true      }    }    ],

Hi, we have a Channel Capping Rule of 1 Email per day shared across multiple journeys.# Example:Journey 1Trigger → EmailJourney 2Trigger → Email 1 → Wait 1d → Email 2 → Wait 1d → Email 3Scenario:Day 1: Journey 2 - Email 1 → SENTDay 2: Journey 1 - Email → SENT       Journey 2 - Email 2 → EXCLUDED by cappingWe need Journey 2 to behave like:Day 3: Retry Email 2Day 4: Email 3The problem is that a capping exclusion does not trigger the Email error path, so the journey continues normally.We also want to avoid creating one recovery journey or audience per communication because it would not scale.Is there a more native/scalable Adobe-recommended solution for this use case? Even with Data Distiller is something dificult to achieve.Thanks.

Hi! I’m working on a use case where an email was not sent because the profile had reached the daily frequency cap.The client would like to keep that communication on hold and retry it the following day. In other words, if the email is excluded today due to capping, it should automatically be sent tomorrow once the profile is eligible again.Is there a way to achieve this behavior in AJO?Thanks! 

I added a Workfront Planning connection field to a custom form and now I want to see the field in a Report or View, however,  I don’t see the field when I try to add a new column. Is this possible?Thank you!

Hello,As a Workfront admin, I'm looking for a way to automatically notify new users when their Workfront account is created. We must have SSO because once they access their account they have access to Workfront.Is there a setting in Setup that sends an automated welcome or activation email to new users?Currently, I send each user a comment, which triggers an email with a link to Workfront, but I'm hoping there's a built-in automated notification option.Thank you. 

Is it possible to measure with AJO how much revenue particular email sendout generated?User opened email User went to web User bought something on a webI do not thinks so because I do not see such a metric in AJO but I would like to confirm 

Source system is ingesting data to AEP-XDM dataset at specific time of the day.Data distiller copies the data from AEP-XDM to OCM-Relational tables at specific time of the dayData distiller performs transformation job on the data present in OCM-Relational tables at specific time of the dayAudience are evaluated at specific time of the day.Campaign which are using those audiences are evaluated at specific time of the day.How do we get E2E timeline view of this ? Are there set of APIs that can be called to get such a timeline view ?

Hi,I have to create a new schema which inherits the default schema and my custom schema means the newly created schema should have tabs from both default and custom one.how can we implement this. I tried granite:include but in schema editor it is not showing fileds and in image properties it is showing.

I would love to be able to edit the headline and body copy for each pop up window in the flow of the Book at Meeting.Window 1 - blank white pop-up (needs to edit copy please wait while we load calendars...something to that effect, can be editable (would also love some icons that have movement… show calendar or hour glass)...Window 2 -Headline and body copy - retrieving calenderWindow 3 - Shows calendar and rep availabilityWindow 4 - ConfirmationRight now the header that is editable shows up the same on all 4 pop-up windows above, not a great experience for user.

I am working on mapping Marketo fields to Dynamics fields. I’ve noticed that some fields are showing as options to map for contacts, but not for leads. The fields exist, I just can see them as an option to map for leads. Any suggestions on how to fix this?

We are experiencing an issue where a batch/scheduled Smart Campaign is failing to deliver emails to target leads, even though the exact same email asset delivers successfully when triggered by a live action (e.g., Form Fill).Technical Details & Findings:Campaign Configuration: The Smart Campaign is a Batch mode campaign. The qualification rules are set to "Each person can run through the flow every time" and Communication Limits are set to "Ignore limit". Asset Validation: The email asset is fully approved. Delivery works perfectly via trigger workflows, confirming the email asset and recipient mail servers are functioning correctly. The Issue: When triggering via "Run Once" or scheduling the batch, the campaign executes but does not deliver to the intended test leads. The Smart List Status currently shows it is only affecting a small subset of people (e.g., around 5 existing people), and our target test leads are being skipped or excluded from the batch run.I need support to analy

In our instance of Marketo, we have ~200 forms programs. These programs use a handful of forms (~10). Many “contact us” pages use the same form but with a unique querystring parameter  appended (e.g., html://www.company,com/en/contact-us/html?cid=my-unique-product-page). These individual programs then fire off lead alerts to specific email addresses (~ 50 across all these programs) and sync into SFDC campaigns (sometimes multiple programs feed into a single SFDC campaign, sometime a unique SFDC campaign). Other forms programs might have 5 webpage references, since the same form is on all those pages and they can go to a common lead alert and SFDC campaign. We also try to record the referrer page (e.g., in my previous example, the contact form page html://www.company,com/en/contact-us/html?cid=my-unique-product-page might be linked from a referring product page, such as www.company.com/en/solutions/my-unique-product-page.html). Right now we’re using an Excel spreadsheet to record all th

Hi all,I’m trying to create a Marketo report showing where MQLs generated and handed over from our FY26 events sit in the funnel today.The requirement is for each regional marketer to select the event programs from their region and report on the current lifecycle status of the MQLs generated by those events.Program Membership would make selecting multiple events straightforward, but we specifically want to focus on leads whose MQL conversion was attributed to the event—not everyone who was a member of the program.I’ve therefore used Converting Campaign as the filter. However, Marketo doesn’t appear to support selecting multiple values within a single Converting Campaign filter, so I’ve had to add each event campaign individually. There are already 29 for EMEA, and this won’t scale well once we include NAM and other regions.Has anyone found a cleaner way to:Group or dynamically filter multiple Converting Campaigns Allow regional marketers to select their relevant event campaigns Report

This is available in GA4. Is this available in Adobe Analytics, panel date . 

We have been getting pushback from stakeholders about how the Marketo add to calendar/ISC files are operating in the New Outlook vs Classic Outlook.Has anyone found a third party tool or workaround, that allows contacts to double click the ISC and have it open in new outlook rather than the new process of download and then add to calendar?

I am trying to build a journey using the wave feature to send over 10 days. The send will be flighted each day over the 10 days. I have tried to dry run / use simulation to test the journey, and I keep drawing an error to say last wave must be within 6 days and 18 hours from journey start. Can waves not go beyond this time? Do we have to keep it within 6 days and 18 hours from journey start or is there a way around this? Thanks!  

Hi Everyone,I’m looking for some clarification regarding the behavior of Typeahead User custom fields in Workfront reports.We have a Task report with a custom Typeahead User field named Assigned Channel Strategist.Here’s what we’ve observed:The Assigned Channel Strategist field displays correctly in the report column.The Typeahead User field is not available when configuring a report prompt.As a workaround, we added the corresponding Assigned Channel Strategist ID field to both the report and the prompt.When entering the User ID in the prompt, Workfront correctly resolves and displays the corresponding user’s name.However, after selecting the user and running the report, no records are returned, even though the report contains multiple records with the same Assigned Channel Strategist ID.We also verified that the field values and User IDs match correctly on the underlying task records.My questions are:Is this expected behavior for Typeahead User custom fields in Workfront report prompt

I see the new 13 month in lake and 90 days in profile store have been implemented across the AJO experience tracking dataset. How is unsubscribe being managed now? I’m seeing cases of where customers have opted out of a communication by clicking the unsubscribe link, being opted back in. the unsub is in the lake, but not in profile any more. What is Adobe doing to manage this? I’m seeing massive GDPR issues here, unless I’m hopefully mistaken regardsMaec

This is a bit of an edge case, but I feel I should find out the answer before it comes up: In our instance, we have a number of records where multiple contacts have the same email address. This is often intentional: As a membership organization, sometimes we’ll have a doctor register for a meeting and add his spouse, kids and a couple staffers all under his email address. So we may have 5 people that are all valid, different people with the same email address. I know that when Marketo sends an email to multiple contacts that have the same email address, it only sends the email once. That part is fine — Dr. Jones doesn’t need to get the same event reminder email 5 times. What I want to know is: How does Marketo choose which contact to send the email to? Is it simply the lowest/highest ID number? Is there a way to ensure the primary recipient? This would mainly be an issue in cases where there are personalization tokens or conditional content. We would like to make sure “Dear {{lead.full

I am unable to turn on the cutom field for the cards on a Board.