Expand my Community achievements bar.

Clarification on Service Account (JWT) Migration

Avatar

Level 1

Hello Adobe Team,

I received a notification regarding the deprecation of Service Account (JWT) credentials in favor of OAuth Server-to-Server credentials. As an administrator of the Play'n GO Malta Ltd organization, I need to confirm the status of our project.

Currently, I am unsure if the Service Account (JWT) credentials are actively being used. I have checked the insights, API calls, and activity logs, but found no activity. Could you please advise if there are any additional checks required to confirm whether these credentials are in use? For example, the last access token generation was in 2023. Can we consider that if there is no activity on this project, we can skip the migration, or even delete the project as there is no actual destination making a connection from Adobe?

Thank you for your assistance.

Topics

Topics help categorize Community content and increase your ability to discover relevant content.

3 Replies

Avatar

Employee
Employee

Hello @christoffert559, have you seen this https://developer.adobe.com/developer-console/docs/guides/authentication/ServerToServerAuthenticatio... ? 

 

I recommend looking at the Project's last service activity date (shown on the overview page) and the "Last access token generated at" timestamp on the JWT credential overview page to confirm whether the project or credential is in use. 

 

After you confirm it is not in use, we recommend you to delete the JWT credential from the project or the entire project itself.

 

Thanks
Manik

Avatar

Level 1

Hi Manik, 

Thanks for your swift response, 
Yea, I have checked the link and items you mentioned, and as I said, I have checked the insights, API calls, and activity logs, but found no activity. 
Also the Last access token generated is related to March 2023!. 

So, I don't think we use this project. 

What's your idea?

Thanks
Mo

Avatar

Employee
Employee

I cannot check your project to see the actual details. But if

  1. the last service activity date is very old, and
  2. the last access token generated at timestamp is also very old, and
  3. the insights tab does not display any activity

then the credential is not active and can be deleted.