Clarification on Service Account (JWT) Migration

Hello @christoffert559, have you seen this https://developer.adobe.com/developer-console/docs/guides/authentication/ServerToServerAuthentication/faqs/#how-can-i-verify-if-the-project-on-the-developer-console-is-being-used ? 

I recommend looking at the Project's last service activity date (shown on the overview page) and the "Last access token generated at" timestamp on the JWT credential overview page to confirm whether the project or credential is in use. 

After you confirm it is not in use, we recommend you to delete the JWT credential from the project or the entire project itself.

Thanks
Manik

Thank you for reaching out. Based on your description, it seems like you're trying to determine whether the Service Account (JWT) credentials are still in use, given the lack of activity since the last access token was generated in 2023.

Here are a few things you can check to ensure whether these credentials are still active or in use:

1. API Calls and Logs:

• Verify API Call Activity: Since you've already checked the activity logs and API calls, ensure that you're reviewing the correct timeframe. Double-check that there are no hidden or intermittent requests that could have been missed during routine checks.

• Look for any access token usage: Even if the project hasn't had any activity recently, the presence of expired or inactive tokens could indicate that the credentials were still being used in some capacity.

2. Access Tokens and Expiry:

• The fact that the last access token generation was in 2023 might suggest inactivity, but also consider checking if the JWT tokens are still valid. If they are expired and there hasn't been a renewal request, it could be an indication that the credentials are no longer in use.

• Tokens that haven't been refreshed in a while might also suggest that the project is dormant or no longer necessary.

3. Review Your Adobe Services Configuration:

• Check for any destination connections: Ensure that the Adobe product(s) or Adobe Experience Cloud services associated with your project aren't connected to any live endpoints or destinations. This would confirm whether Adobe services are still interacting with the credentials.

4. Skip Migration or Project Deletion?

• If there is no active use of the Service Account credentials, and if you confirm that no Adobe destination is relying on the project, then you can skip the OAuth migration process. However, before you delete the project, I’d recommend reaching out to your internal team or other stakeholders who may still have some legacy use cases or potential integrations planned.

• Deleting the project is only advisable once you're absolutely certain that no other services or systems are depending on it.

5. Recommended Next Steps:

• Validate inactive project: If you’re confident that there’s no ongoing activity and no current dependencies on the project, you can move forward with deleting it.

• Skip OAuth migration: Since there’s no active usage, you can defer migrating to OAuth credentials.

If you are still unsure after verifying the above checks, I would recommend getting in touch with Adobe directly to ensure there are no hidden dependencies tied to the project.

Let me know if you need any further assistance or have additional questions.

Best regards,
Shaka