AEM to Target Integration migration from Service Account (JWT) credentials to OAuth Server-to-Server credentials

[krassibb]

Hi,

I recently received email to "Migrating from Service Account (JWT) credential to OAuth Server-to-Server credential" - here is the link in the email -  https://developer.adobe.com/developer-console/docs/guides/authentication/ServerToServerAuthenticatio...

The migration works well in the developer console, but once the old JWT credential is deleted, when I go in AEM in the "ADobe IMS Technical Account" and check the health of the connection, I get now error Dev Adobe Target IMS: failed to get access token from authorization server status: 400 response: {"error_description":"The client must have the exchange_jwt scope.","error":"invalid_client"} 

Any suggestion on how to fix this urgently is appreciated.

Thanks,
Krass

[tmj]

Hi @krassibb, 

Did you also update your AEM instance to use the new credential?

Thanks
Manik

[krassibb]

Hi @tmj,

Yes, I did update the credentials in AEM IMS configuration. Although, the configuration fails on the JWT Payload mandatory section.

Please notify the AEM product team about the issue.

Thanks,

Krass

[krassibb · Accepted solution]

Looks like the AEM team will be responsible to update the AEM IMS Client config to use the new OAuth Server-to-Server credential. In the meantime, the old JWT credential will be still valid.

[Sreekanthkp]

Did we get a solution for this ? I am facing the same issue "Dev Adobe Target IMS: failed to get access token from authorization server status: 400 response: {"error_description":"The client must have the exchange_jwt scope.","error":"invalid_client"} "

[jurgenbrouwer]

We are having the same issue after migrating from JWT to OAuth. I'm unable to find any documentation on how to migrate our on-prem AEM to this new authentication.

Adobe-Target-IMS-IO: failed to get access token from authorization server status: 400 response: {"error_description":"The client must have the exchange_jwt scope.","error":"invalid_client"}

Edit: we have created a support ticket at Adobe to check if can revert the migration since AEM does not support OAuth for the export of Experience Fragments to Target yet.