Overview
Adobe is retiring the old way to connect apps to Workfront. This old way uses legacy Open Authorization 2.0 (OAuth2) apps. OAuth2 is a standard way for one app to safely connect to another.
Your Knak Workfront integration needs a new Adobe Developer Console credential. A credential is a pair of codes that lets Knak connect to Workfront for you.
The switch happens in place. Your linked assets, field mappings, and settings stay the same.
Key dates
Date | What changes |
November 1, 2026 | You can no longer create new legacy OAuth2 apps. New Workfront integrations in Knak must use Adobe Developer Console. |
February 1, 2027 | Legacy OAuth2 apps stop working. Adobe does not plan to extend this date. |
Important: Migrate well before February 1, 2027. If you wait, your Workfront integration in Knak will stop working on that date.
Who You Need
This migration needs three roles. These are often three different people. Bring in your Identity Management System (IMS) Org admin early. The IMS Org is your company's whole Adobe account.
Role | Where they work | What they do |
IMS Org admin (full admin) | Adobe Developer Console | Creates the new credential (Step 1). A Workfront admin alone cannot do this. |
Adobe admin | Adobe Admin Console | Gives the technical account admin access to Workfront (Step 2). |
Knak Admin | Knak | Adds the new credential to the integration (Steps 3 and 4). |
Find Your IMS Org Admin
Not sure who your IMS Org admin is? Try one of these:
Ask your IT team who manages your company's Adobe Admin Console.
Ask your Workfront account team at Adobe.
Before You Begin
Keep your old OAuth2 app. Do not delete it until Step 5.
Know that saving replaces your old credentials. When you save the new credential, Knak replaces the old Client ID and Client Secret. To go back, you would need to enter the old app's details again and reconnect. Keep the old app until you test the new connection.
Group your Workfront instances. An instance is one Workfront site, such as production, sandbox, or preview. You can add more than one instance to the same Adobe Developer Console project. Each instance must be visible in the console.
Step 1: Create the Credential in Adobe Developer Console
Your IMS Org admin does this step. These steps are the same as in Setting up the Workfront integration.
Create the Project
Log in to the Adobe Developer Console.
Create a new project.
Add the Workfront API
An Application Programming Interface (API) lets two apps share data.
Open the project and click Add API.
Select Adobe Workfront under Experience Cloud.
Click Next.
Select OAuth Server-to-Server.
Click Next.
Select each Workfront instance you want Knak to connect to. Skip this if you only have one instance.
Click Save Configured API.
Copy Your Credentials
Open the OAuth Server-to-Server credential in the project.
Note: You need to be a full IMS Org admin to select an OAuth Server to Server authentication type. Ask your IMS Org admin to do this step. To learn more, see Adobe's migration guide.
Copy the Client ID and Client Secret. Keep them somewhere safe.
Note the technical account email on the project page. The technical account is a special Workfront user named techacct. Knak uses it to connect. You need this email in Step 2.
Step 2: Give the Technical Account Access in Adobe Admin Console
Note: An Adobe admin needs to do this step.
Creating the credential adds the techacct user to Workfront. This user is a Contributor by default. A Contributor cannot see most work. Without admin access, Knak will connect but may miss data or fail to save changes.
Log in to the Adobe Admin Console as an Adobe admin.
Go to Products and open the Workfront product you created.
Select your Workfront instance.
Select the product profile for that instance under Product Profiles. If you have more than one instance, make sure you pick the right profile.
Open the Admins tab and click Add admin. [Confirm button label.]
Enter the technical account email from Step 1.
Click Save.
Repeat steps 3 to 7 for each Workfront instance Knak needs to reach.
Want to limit what the technical account can see? Change its access level or add it to projects in Workfront, like any other user. To learn more, see Adobe's Gaining access guide.
Step 3: Switch the Credentials in Knak
A Knak Admin does this step.
Log in to Knak.
Click Admin, then Integrations.
Find your Workfront connection under My Platform Connections.
Click Edit.
Paste the new Client ID and Client Secret. Do not change the Instance URL.
Click Save.
The integration now shows Connected to Workfront.
If you see the message "Adobe could not validate these credentials," check your Client ID and Client Secret again.
Step 4: Test the New Connection
Link a test email to a Workfront task.
Push a status update.
Sync a comment.
Sync the email for approval.
If live updates are on, change a mapped field in Workfront and confirm Knak updates.
Is something missing or not saving? Check Step 2 again.
Step 5: Delete the Old OAuth2 App
Do this step only after every test in Step 4 works.
Go to Setup in Workfront.
Click System, then OAuth2 Applications.
Delete the old Knak app.
Troubleshooting
Problem | What to do |
Knak is connected, but data is missing or changes do not save. | The technical account does not have enough access. Go back to Step 2. |
You see "Adobe could not validate these credentials." | Check the Client ID and Client Secret. Make sure the credential is for the right Workfront instance. |
You cannot create the credential. | You need full IMS Org admin rights. Ask your IMS Org admin to do Step 1. |
FAQs
Will I lose my linked assets or settings?
No. The integration switches in place. Your linked assets, field mappings, and settings stay the same.
What happens if I do not migrate by February 1, 2027?
Your legacy OAuth2 app stops working on that date. Knak will no longer connect to Workfront until you finish this migration.
Can I go back to my old OAuth2 app?
You can only do this until February 1, 2027. Enter the old app's Client ID and Client Secret in Knak, then reconnect.
Need more help? Contact support via live chat within Knak using the chat bubble in the bottom right corner or email support@knak.com.