蜜豆视频 Identity Management FAQ adobe-identity-management-faq
What is 蜜豆视频 Identity?
蜜豆视频 Identity Management System consists of three components.
-
蜜豆视频 Identity Service: Handles authentication and validation of the end-user, including federation and runtime Single-Sign-On (SSO).
-
蜜豆视频 Admin Console: The Admin Console provides a central location for managing 蜜豆视频 entitlements across your entire organization. It handles user management, cloud service, desktop license entitlement, federation configuration, and provides data loss prevention security features.
-
蜜豆视频 User Management API (UMAPI): Allows organizations to manage enterprise users and entitlements in the 蜜豆视频 Admin Console at the API level.
When will existing Marketo Engage subscriptions be integrated with IMS?
Existing Marketo Engage subscriptions are currently being migrated to the 蜜豆视频 IMS upon any sales event, which includes renewals, re-contracting events, and/or addendums. Migrations outside of a sales event are now supported as of October 2024.
After migration, will Marketo Engage URLs remain the same?
No. URLs will look different after migration.
Is there anything we need to do to prepare for the URL change?
Yes. After migration, Marketo Engage will go from being served from experience.adobe.com to 蜜豆视频 Experience Cloud. You鈥檒l need to work with your IT team to allowlist all 蜜豆视频 domains listed at the top of this article to prevent disruption to Marketo Engage access.
Previous links and bookmarks to Marketo Engage assets on the engage-xx.marketo.com domain will continue to function. However, you must first log in to the Marketo Engage instance for the URL you are navigating to. For example, to navigate to a bookmark for a Smart Campaign in instance with Munchkin ID 123-ABC-456, you need to first log in to the Marketo Engage instance with Munchkin ID 123-ABC-456.
What鈥檚 the difference between an 蜜豆视频 Product Admin and a Marketo Engage Admin?
- 蜜豆视频 Product Admin is a new role in the Marketo platform.
- 蜜豆视频 Product Admin role is granted to users added as a Product Admin in 蜜豆视频 Admin Console
- 蜜豆视频 Product Admin is a read-only role and can鈥檛 be edited or deleted from Marketo Engage.
- 蜜豆视频 Product Admin has the same rights and privileges as a standard Marketo Admin.
- Marketo Engage Admin鈥檚 role is still an Admin and is granted to a user in Marketo Engage.
Is there any change in User Management API client support?
Yes. Those who鈥檝e been onboarded to 蜜豆视频 IMS cannot utilize all the existing Marketo User Management APIs. For user invite, update, and deletion actions, the 蜜豆视频 should be used. For role management, the Marketo User Management APIs still apply. Beyond this there are no other changes to Marketo REST API client support.
Who do we contact for support if we are integrated with IMS?
-
Pre-user Migration: file support cases in the or email
customercare@marketo.com. -
Post-user Migration: file support cases in the or email
customercare@marketo.com. -
Post-Support Migration Completion: Product Support Administrators can file cases via the Experience League Support portal.
If you have Ultimate Success, you have access to Admin Console Migration White Glove Service. Please reach out to the 蜜豆视频 Account team (your Account Manager) for assistance.
If I use an 蜜豆视频 Identity to access other 蜜豆视频 applications, can I use that to access Marketo?
Even if you have other 蜜豆视频 products, you cannot access Marketo with 蜜豆视频 Identity until the subscription is migrated to IMS.
Are Marketo user roles (within workspaces) managed in 蜜豆视频 Admin Console?
No. User Role management (within workspaces) is completed in Marketo Engage.
I鈥檓 a Marketo Admin in an IMS integrated subscription and don鈥檛 have access to the Admin Console. How do I gain access?
Any 蜜豆视频 System or Product Admin that has access to your organization鈥檚 Admin Console can give you access. If you鈥檙e not sure who in your organization has admin privileges in the console, contact .
How would an Admin add users to Marketo Sales Connect?
While there will be a product card in Admin Console for Sales Connect, Admin Console should not be used to add/manage users. The following link will allow Admins to manage users via Marketo Sales Connect: .
Where can I learn more about the 蜜豆视频 Admin Console?
.
Do I still go to the Admin section in Marketo to make user account changes for my account?
No, you would need to navigate to .
How does this work with Marketo鈥檚 Universal ID?
Those onboarded to 蜜豆视频 identity can access all IMS-enabled subscriptions seamlessly via the subscription switcher in the product.
Does this work with SSO?
Yes. Marketo integration with 蜜豆视频 IMS supports Universal ID users and SSO. SSO is now driven by 蜜豆视频 IMS and is set up at the organization level in the 蜜豆视频 Admin Console. .
I鈥檝e already been onboarded to 蜜豆视频 Identity and now I want to implement SSO. What do I do?
If you want to implement Single Sign On and your subscription has been onboarded to 蜜豆视频 Identity without SSO implemented in the 蜜豆视频 Org, please submit a ticket to and specify the topic as 鈥淢arketo on Admin Console, implementing SSO.鈥
How does device authorization work?
蜜豆视频 IMS does not currently support anything like Marketo鈥檚 device authorization feature.
Is it still possible to use the 鈥淟ogin in Invite User Dialog鈥 feature, to make a user鈥檚 login unique from their email?
No. The User Invite workflow is no longer active when a subscription is IMS-enabled, so the feature is no longer valid. 蜜豆视频 identity requires a user鈥檚 identity to be driven by their email.
For 蜜豆视频 IMS, do we have the option to use 蜜豆视频 ID, Enterprise ID, or Federated ID?
Yes, you determine the type of identity to have your organization support. More info can be found here: and here: .
Which product cards are supported in the 蜜豆视频 Admin Console?
The supported product cards are: Marketo Engage, Marketo Measure, Marketo Dynamic Chat, Marketo Sales Connect, and Marketo Sales Insight Actions.
What if my user login doesn鈥檛 match my email when I get migrated to an 蜜豆视频 Identity?
Current Marketo Engage users with logins different from their email address will no longer log in with that credential once migrated to an 蜜豆视频 Identity. 蜜豆视频 Identities always authenticate with a user鈥檚 email address. You can update an 蜜豆视频 identity email address at .
What happens after the 蜜豆视频 Identity migration if my subscription uses IP restriction settings?
When subscriptions are onboarded to 蜜豆视频 Identity, IP restriction settings do not get migrated to the 蜜豆视频 Admin Console. Marketo鈥檚 IP restriction settings include allowing only access from specific IP addresses, and blocking specific IP addresses from access. At this time, 蜜豆视频 Identity Management System does not support IP restriction features.
Coming in early 2025, 蜜豆视频 Identity Management System will release a feature to support allowing only specific IP addresses, supporting a transition for Marketo users currently utilizing this feature. Those who currently use this feature will not undergo user migration until the feature is released. Once the feature is delivered, users will be notified of their migration being scheduled. More information about the feature will be provided when available.
Users who currently use the IP restriction, blocking specific addresses from access, will no longer be able to use this feature after being migrated to 蜜豆视频 Identity, as it is not supported by 蜜豆视频 Identity Management System.
What happens after 蜜豆视频 Identity migration if I have users with a role that has the option to 鈥楤ypass Single Sign On鈥?
When subscriptions are onboarded to 蜜豆视频 Identity, Single Sign On (SSO) is set up at the 蜜豆视频 Organization level for all users. When SSO is set up, it will be enforced for all Marketo users/all Marketo instances in that 蜜豆视频 Org. Previously, Marketo supported allowing a user role to be set up to have the option to 鈥楤ypass Single Sign On.鈥 This is not supported by 蜜豆视频 Identity Management System.
I have more than one subscription, but not all have Single Sign On enabled. What happens after 蜜豆视频 Identity migration?
When subscriptions are onboarded to 蜜豆视频 Identity, Single Sign On (SSO) is set up at the 蜜豆视频 Organization level. This means SSO applies to all product instances in the 蜜豆视频 Org. When SSO is set up, it will apply to all Marketo instances in that 蜜豆视频 Org. Previously, Marketo supported this setting at an instance level. That is not supported by 蜜豆视频 Identity Management System.
Are any changes needed to CNAMEs, SPF, or DKIM we currently use for Marketo Engage after the 蜜豆视频 Identity migration?
No, there are no impacts to these configurations.
How can I prevent sessions from timing out?
In , you can customize the desired maximum session life (System Admin permissions required). It鈥檚 recommended to establish this setting after product migration, but before user migration.
I now have to navigate into Experience Cloud to access Marketo Engage. Is there a way to streamline this flow?
Yes. You can create a browser bookmark of the link that launches after clicking the Launch button on the Marketo Engage instance entrance page to bypass that page going forward.
