[Feb 11 AMA] Ask Me Anything about the Marketo IMS Migration

[Jon_Chen]

This event has concluded, thank you for attending!

As you may have heard, all Marketo users will be required to migrate to the Adobe Identity Management System (IMS) soon. Join this informative AMA session with our experts - @Steph_Simmons, @Yuri_Hirohashi , @Zoe_Forman, and @ilona_buteneers! They will walk you through the key benefits, crucial steps, and best practices to get your team ready. Now's your chance to get answers to any questions you may have about the migration and what changes you can expect going into the transition process. 

This AMA is a follow up to a few IMS events and resources that were published in the last month. If you missed them, be sure to check them out in the section below. If your organization is preparing for or about to undergo this migration, this AMA session is essential. Use this an an outlet to understand the customer benefits, common "gotchas" and concerns, the preliminary steps you need to take for your migration, and more. Our Adobe Marketo Engage Champions and experts are here to help!

IMS Questions to help you get started:

• What are the benefits of migrating users to Adobe Identities?
• What should I be aware of before beginning the migration?
• What does a typical migration timeline look like?
• How do I prepare my colleagues for this migration?
• How can I ask for help during the pre-user, post-user, and post-support migration?

Additional Resources: 

• Adobe Identity Management System Migration Guide for Customers
• [On-demand] IMS Migration Unpacked: Simplifying the Transition for End Users

GUIDLINES AND REQUIREMENTS TO PARTICIPATE

Please note that this text-only AMA takes place as a discussion post on the Marketo Community. If you are unable to make this live event, you can always publish your question in the thread now! Please be sure to REFRESH the page frequently so you don't miss responses from our PMs or new questions/comments. If you are unable to attend, you can always post your question or comment in advance.

Your post in the dedicated thread must be:

• Related to the Marketo IMS Migration.
• To post a question or comment, you must be signed into the Marketo Community during the 1-hour period, on February 11, 2025, between 9am - 10am PST. Please note you do not need to login if you aren’t submitting a question or comment.
• For maximum visibility, please tag our experts in any of your posts on the dedicated thread by following the format “@username.”
• If you are unable to attend, you can always post your question or comment in advance!

**All AMAs are TEXT-ONLY, meaning there is no webinar, video call, or recording. All questions and answers will occur on this thread.

This event has concluded, thank you for attending!

[Thorsten]

• What will be the trigger / kick-off for the process? Is someone going to contact us before the 30 days countdown starts to check if we are ready with SSO setup?
• Will sandbox and production systems move at the same time?
• How does the migration work technically, what exactly is being done behind the scenes? (inserts, deletes, mapping?)
• What is the key field for the migration to attempt a match with existing Admin Console users? Is it based on the Marketo Login ID field or the (verified unique) email address field?
• Will the migration of a sandbox system - where we had to confirm with different unique email address - cause duplicate users in Adobe IMS?
• Assuming a more complex scenario where we have Adobe Org A with Marketo and Adobe Org B with e.g. AEM Assets. We implement Marketo with SSO, but in Org B our users are still logging in with their non-federated Adobe IDs => what will be the experience for them in the browser when working with both systems simultaneously? Will they be able to work with two different browser tabs being logged in independently or will it conflict and force logouts of one system to use the other?
• Is there any way to retain the Marketo Nation community profile, incl. bookmarks and notifications for open discussions, ideas etc...?
• Can you walk us through the end-to-end creation process of a new Marketo user? Does it need to happen sequentially, first IMS then Marketo? Or does the setup of entitlements in IMS "insert" the user without roles/workspaces into Marketo already?
• Since I can migrate users individually I assume that people will - during the transition - be able to login via the old SSO and IMS in parallel?

Thanks for your feedback!

[Zoe_Forman]

Hi @Thorsten 

Thanks for your questions, we will certainly cover these in the Ask Us Anything IMS session on the 11th February.

If you haven't already can you RSVP and ask your questions so we can capture all questions and prepare to answer all in the session.

I have also taken note of our questions below. If you can't join live on the 11th February , we will answer all questions in the thread so you can return to the tread later.

Thanks, Zoe 

[Zoe_Forman]

Hi @Thorsten 
We are breaking down your questions so your answers will come in a few replies:

• What will be the trigger / kick-off for the process? Is someone going to contact us before the 30 days countdown starts to check if we are ready with SSO setup?
  Yes, Adobe will contact all of your Admins to confirm your migration will be soon when you are in the queue. This is when your IT team can set up the SSO. You will also get a 30-day provisional date, which you can accept or push back if you are not ready. All communication from Adobe to your Admins is via email. When you are within your 30-day count down this will also appear in your instance when you login as a reminder.
• Will sandbox and production systems move at the same time? Usually, yes, they move together, but as separate products with associated users.
• How does the migration work technically, what exactly is being done behind the scenes? (inserts, deletes, mapping?)
  Marketo  is moving to a new URL - now the Experience Platform, which hosts all Adobe products and access to Marketo documentation, exams, Community Nation and more. The customer benefits mean all your Adobe logins are in one place, and one login for all products.

Feel free to reply or ask for more details.
Thanks, Zoe 

[Thorsten]

Hi @Zoe_Forman, 

thanks for the feedback! Just to clarify:

1. Are we on the 30 day countdown as soon as we receive the first email?

3. Okay, the URL change is a good point to keep in mind. However, the question was more geared toward the technicalities of the actual user migration. Will it physically delete and re-create the Marketo users during the process, losing audit logs etc...?

[Zoe_Forman]

Hi @Thorsten 

1. Are we on the 30 day countdown as soon as we receive the first email? No, your initial email will be a heads-up migration will be happening soon.  The 30 day count down will only start when you accept the proposed date. You can push back at least once.

3. Okay, the URL change is a good point to keep in mind. However, the question was more geared toward the technicalities of the actual user migration. Will it physically delete and re-create the Marketo users during the process, losing audit logs etc...?

Users will be migrated from the current location to the Adobe ID in Experience and deleted from the old system. However, all audit logs will remain in the Audit trail; no data or logs are lost or deleted. A user cannot work in both the old and new logins.

After migration, you cannot go back and log in to the old login.

Thanks, Zoe 

[YuriHirohashi]

Q: What is the key field for the migration to attempt a match with existing Admin Console users? Is it based on the Marketo Login ID field or the (verified unique) email address field?

A: the (verified unique) email address 

Q: Will the migration of a sandbox system - where we had to confirm with different unique email address - cause duplicate users in Adobe IMS?

A: No, it doesn't. Adobe ID is based on unique email address. So there will be two separate Adobe users created (or matched), one for the email address in the Production, and another for the different email address in the sandbox. You will not be able to use instance switcher since they are two different users in this case.

Q: Assuming a more complex scenario where we have Adobe Org A with Marketo and Adobe Org B with e.g. AEM Assets. We implement Marketo with SSO, but in Org B our users are still logging in with their non-federated Adobe IDs => what will be the experience for them in the browser when working with both systems simultaneously? Will they be able to work with two different browser tabs being logged in independently or will it conflict and force logouts of one system to use the other?

A: Two different profiles are involved in this case. If you are logged into Marketo using SSO, you should be able to login to the other using an incognito window. 

[Thorsten]

Hi @YuriHirohashi,

thanks for the feedback! Just to clarify:

2. So it will be duplicates, but just not by your definition 🙂 *sigh* Sounds like we'd better not migrate the sandbox users then.

3. Ok, that's bad news as well. Especially in light of the new email editor integration with AEM Assets. Our SSO team is going to love this...

[ilona_buteneers]

Hi @Thorsten, getting back to your last 3 presubmitted questions: 

• Is there any way to retain the Marketo Nation community profile, incl. bookmarks and notifications for open discussions, ideas etc...? 
  Answer: There won't be any impact on your Marketo Nation community profile. You will still be able to access this after the migration to IMS. After migration and logging in in Marketo, navigating to Community, you will still be linked to the Community. 
• Can you walk us through the end-to-end creation process of a new Marketo user? Does it need to happen sequentially, first IMS then Marketo? Or does the setup of entitlements in IMS "insert" the user without roles/workspaces into Marketo already? 
  Answer: For creating a new Marketo user after migration to IMS: you'll login through https://experience.adobe.com/#/@[organizationname]/home, navigate to Admin Console, go to Users, click on Add Users and enter the new users' email addresses and assign them to the right products (e.g. Marketo Engage). Per product you can also define the type of Profile. 
  To my experience, the setup of entitlements (for existing users that needs to be migrated to IMS) inserts the users automatically but I had to review the roles and especially the Workspaces the users could access. For instance for most of our users they could only access the Default Workspace, and not the other workspaces so I had to reassign this through Admin > Users and Roles.  
• Since I can migrate users individually I assume that people will - during the transition - be able to login via the old SSO and IMS in parallel? 
  Answer: No, it's either way. Or you have migrated already and in this case you will only be able to login using the Adobe ID, if there are other users within your org who haven't migrated yet, they will still continue to login their Marketo ID. 

[Thorsten]

Hi @ilona_buteneers,

thanks for your feedback. Just to clarify:

2. Okay, if I understand this correctly, this could be super bad from a security point of view. Our id=1 workspace paired with "Standard" user role would provide new users access to data that they should not have, even if only temporarily. This is a big risk for security and compliance. How can we best address these concerns?