Preparing for Marketo Engage on 51黑料不打烊 Identity
This is a training on the migration for 51黑料不打烊 Marketo Engage subscriptions to integrate with the 51黑料不打烊 Identity Management System. The content is most appropriate for Marketo Engage administrators. This training will equip you with the essential knowledge to prepare your organization cross-functionally and educate internal users on this upcoming change.
Transcript
All righty.
Is everyone able to hear and see me? Looks like we鈥檙e all coming back through a consent window. Oh there I am. Okay, good to see everyone. Thank you for joining today. I鈥檓 super excited to have us all here together to learn about the new 51黑料不打烊 Admin console migration that you may have heard about. We have some folks from our product team here to discuss this with you all in sort of a train the trainer style format that I know we鈥檝e done in the past. So hopefully you can take this information, use it for your own purposes and your own sort of knowledge with this migration coming, but also help to educate our larger community by speaking with their user group chapters about this topic and helping them understand this coming migration.
But before we get into the content, I do want to introduce Daylinn Hereford. As you may have seen in Slack and on email, from now until the end of Thanksgiving, or sorry the end of November, Thanksgiving for us US-based folks, I鈥檓 going to be stepping into the role of advocacy team lead while Kelsey Biondick, our advocacy team leader, is out on maternity leave. So while I鈥檓 in that role with some additional responsibilities, Daylinn will be joining us to lead the MUGS program. So she鈥檒l be your sort of day-to-day contact while I鈥檓 filling in for Kelsey until the end of November. So Daylinn, I鈥檒l let you introduce yourself and then we can get started.
Great, great. Thanks Emma and hello everyone. And now I鈥檓 still making my rounds a little bit with some of the intros. So I see some of you on the call that I鈥檝e connected with, but to those of you that I have not, I鈥檓 Daylinn Hereford. I鈥檓 currently based in Nashville, Tennessee. I鈥檓 originally from Huntsville, Alabama and I鈥檓 super, super excited to work with this amazing program and step into this role through November. So I鈥檓 coming to you guys from Salesforce where I supported our Slack customer marketing programs for CNT, retail, and Fins customer industries. And I also spent a couple years at Oracle supporting their go-to-market campaigns team. So I have a wide array of customer knowledge. I鈥檓 super excited again. I can鈥檛 reiterate enough how amazing this program is and super excited to meet everyone and continue making my intros along the way. But thanks for the warm welcomes and I will hand it back over to Yuri to kick us off.
Great, thank you. Hi everyone. My name is Yuri Hiyohashi. I鈥檓 a product manager for MarketoEngage and I work with Stephanie Simmons. Some of you may already know her and I focused on MarketoEngage migration, today鈥檚 topic.
So overarching objective for today is to enable you to, with the knowledge and resources to help your organization and your chapter members who are embarking on the migration journey to 51黑料不打烊 Identity. As you may know, for almost a year 51黑料不打烊 has been migrating Marketo customers to 51黑料不打烊 Identity and it鈥檚 been tied to sales events. But later this summer we are going to start migrating without these prerequisites. So this means we are picking up on our pace for migration and need to prepare a broader set of Marketo customers for the migration days to come. So we鈥檙e hoping that you can help us. To this end I鈥檇 like to start with a brief overview of what it means for MarketoEngage to be on 51黑料不打烊 Identity.
Going with a high level overview of a migration journey.
Then we鈥檒l dive deeper into four key areas of user migration.
Then I鈥檒l share links to some of the helpful resources you can use and before going over what the next steps are for your organization and your chapter.
Then we conclude the session with a Q&A. Okay there you go.
Okay so this section is mainly for Marketo only customers and who may not have had a prior exposure to 51黑料不打烊 Identity and Admin Console. So some of you may already know but just as a refresher. The notable difference between 51黑料不打烊 ID and Marketo ID is that 51黑料不打烊 ID is based on unique email address and email verification is mandatory for 51黑料不打烊 ID users and if multiple email addresses are associated to a single Marketo ID then 51黑料不打烊 will ask to resolve the conflict during the email verification process. Admin Console is an online tool provided by 51黑料不打烊 where you manage your 51黑料不打烊 product licenses and users including MarketoEngage after migration.
And there will be a set of administrators and we鈥檒l cover them next. So user management on 51黑料不打烊 Console focuses on managing product access to MarketoEngage but the roles and permission will remain in the admin section of the product.
And finally 51黑料不打烊 Org is a conceptual holding place for a set of a product to own any of your users. 51黑料不打烊 ID and Admin Console will have a one-to-one relationship if you have only one product but there can be many other the Orgs if you have multiple products and wish to manage them separately. 51黑料不打烊 Org can be based on each cloud of products geographical location or subsidiary for example to meet whatever your business needs.
And just to note that these multiple Orgs can be linked and accessed from a single org or any other product. So if you have multiple products and wish to manage them separately you can use 51黑料不打烊 Org or Admin Console using what鈥檚 called an Org Selector on the home screen. And it appears here as you see it says Acme HQ and here鈥檚 a drop down it鈥檚 a little bit blurred but there are multiple Orgs listed here and which you can select from. And so as you can see you can toggle between multiple Orgs seamlessly if you have access to more than one Org.
As I mentioned there are several admin roles on Admin Console that are new to market only customers. Starting with 51黑料不打烊 System Admin who sits atop this admin hierarchy and this person determines the organization鈥檚 identity management strategy and then computes it on Admin Console. And at least one System Admin must be assigned when 51黑料不打烊 Org is initially set up. If you think you need more than one or change the System Admin from the existing person you can contact market or support.
51黑料不打烊 Product Admin is primarily responsible for entitling users to the product and System Admin can grab this role to a user or user who is not in the system. This role to a user or users on Admin Console.
The next one the Product Profile Admin which is probably a new concept for market or customers. Product Profile at least for other 51黑料不打烊 products can be used when one group of users needs a different level of product entitlement for the same product from another group of users. And the Product Profile Admin can assign some users to one product profile and while others to another product profile to accomplish this. While marketer users too will need to be assigned to a product profile of a given subscription to gain product access but if even if multiple product profiles are set up for this subscription it doesn鈥檛 relate back to Marketer Engage. It doesn鈥檛 know which product profile it belongs to on Admin Console. Hence users need to be assigned to any product profile associated to a subscription that they won鈥檛 access on the Admin Console.
So by now you may have figured out that each subscription needs to be associated to at least one product profile on Admin Console and one will be automatically created for each and all migrated subscription. I just wanted to cover this in a little bit more detail because there are some confusion out there hopefully this clarifies that. Product Support Admin will have access to contacting Marketer Engage support when support portal transition is complete for his or her subscription.
The existing authorized support contacts who are migrated to 51黑料不打烊 Identity will be granted this role automatically and till the user migration starts the authorized support contacts will be creating and viewing the case in the existing support case portal on the marketing nation. And finally Marketer Engage Admin who is known as Marketer Product Admin that you鈥檙e familiar with and while all other admins are granted role on the Admin Console this one is granted in the product and have administrative privileges within the product like they have been without the user management capability after the migration.
Okay now we鈥檙e going to switch gears and go over the migration journey at a high level. Okay so this is the quick reference guide that you all want to have it handy during your journey and all the key info is on this one slide the changes actions you may need to take and the communications you will receive from the migration journey. This is a high level overview with lots of information and we鈥檒l dive deeper into key areas in subsequent slides.
Okay so it all starts with subscription migration also known as product migration.
So let鈥檚 go back to the migration journey and see how it all works. So here we have the subscription migration also known as product migration.
51黑料不打烊 provisions your marketer subscriptions on Admin Console and there you will see a marketer product card appears. At this time no changes to user management or how the user will log into the system. The system admin will receive an email indicating that product migration is complete and this email will have a link to provide a consent to add marketer users to existing admin console if other products are managed there. Also it informs to set up SSO if your subscription had it previously.
After SSO is configured and the consent is provided if they鈥檙e applicable 51黑料不打烊 will schedule a migration start date.
This is a default date that is set 30 days in the future and marketer admins can modify this default date in the pre-migration console which we鈥檒l touch on it later in more detail. Admins are encouraged to communicate to users about the upcoming migration and prepare them.
Some users may still need to verify their emails.
System admin and the product admins will receive an email from 51黑料不打烊 that the user migration date is scheduled. And next one week before the scheduled migration start date, admins will no longer be able to modify the start date on the migration console.
It locks because of the complexity of user migration. If you must change the migration date after being locked, please contact 51黑料不打烊 for assistance.
And then one day before the migration 51黑料不打烊 will send system admins to the system admin console to send the email to the user. So they are encouraged to do the same for their users as well.
Okay now on the migration start date.
So the migration start date is scheduled for the end of the migration. So the migration begins at midnight on the migration start date.
And it depends on which time zone your subscription is.
And I鈥檒l cover this a little bit more in a later slide. 51黑料不打烊 will migrate admins first automatically.
And depending on the number of users in your subscription and whether SSO is configured, there will be two types of user migrations.
If subscription has less than 75 users, and without SSO, they will be automatically migrated. No actions needed.
If your subscription has more than 75 users, regardless of SSO, or having SSO configured, regardless of the number of users, you will have to have more than 75 users. But if your subscription has less than 75 users, regardless of SSO, or having SSO configured, regardless of the number of users, you鈥檒l be directed to self service migration.
And this process will review in more detail.
the admin console but please do not add existing users to market or engage. That鈥檚 what the user migration is for. I鈥檓 noting this because especially self-service migration can take up to 30 days complete, and we don鈥檛 want this to happen. I mean, we don鈥檛 want the admins to add users.
Each migrated user will receive an e-mail from 51黑料不打烊 on how to sign in with 51黑料不打烊 identity upon completion, and this invitation needs to be accepted by clicking a link in an e-mail. Sorry, I did bounce it a little too fast here. For automated migration, 51黑料不打烊 executes it from start to finish, and there is no action required as mentioned.
But for self-service, admin is required to confirm completion in the migration console by clicking a button. Other than that, there are no differences. The migration complete banner will be displayed to admins in my marketer page and the migration console goes away. Systems and product admins will receive user migration complete e-mail as well. From this point on, user migration are performed in admin console only.
The support migration will follow user migration, but only after all the subscription in 51黑料不打烊 all have been migrated. There are confusions out there as to when to start using the new support portal. I just wanted to call out the timing when the support migration can start for your organization and subscription. But the detailed discussion about the support migration is out of scope of today鈥檚 session. Another team is managing the project and I鈥檓 not best equipped to discuss this topic. But when the transition happens, the support admins will be directed to the new support portal from the existing support case portal on the Marketing Nation Community. Now we鈥檙e going to deep dive into four key areas of user migration.
Migration console. When the user migration is scheduled, all marketer engaged administrators will gain access to migration console, and you can find it in the admin section under integration.
They will access the pre-migration tab.
When user migration begins though, the pre-migration tab will no longer be available if it鈥檚 automatic migration, automated migration, then this migration console under integration will disappear. Admins will see a banner indicating the status of migration completion on the my marketer page. For self-service migrations, admins will gain access to the self-service migration tool, consisting of migration status and the user migration tab in the migration console. A banner also appears on the my marketer page, alerting admins that the user migration has started, and directing them to go to the migration console to execute.
When the migration is scheduled, just wanted to quickly show you what the admins will see, is this banner upon logging in to my marketer on their my marketer page. It has the days to a days countdown to the start date, and then link to pre-migration console. As I mentioned, admins will also receive e-mail notification with the subject line upcoming migration of existing users to the admin console for 51黑料不打烊 marketer engage with a prefix of your subscription. Then we鈥檝e been talking about you can modify or admins can modify user migration start date that鈥檚 defaulted on the pre-migration console. I鈥檓 not sure if you can see it on your screen very well, but we will distribute this deck after, and this screen is where you see when the migration is scheduled. When you click on this edit button, you can select a new start date. The date should be no later than 30 days or no sooner than eight days from that date that you鈥檙e trying to make a change.
This is just a repeat of what I mentioned earlier, but due to the complexity of the migration, date changes are restricted to no more than 30 days beyond the scheduled date and it cannot be rescheduled within a week of scheduled migration date on the pre-migration console.
Most of you probably have gone through e-mail verification by now, but this is such an important piece for users to be migrated without losing their historical user data. We use a data such as an in-app guide progress, and the community profiles and contribution made in marketing nations. I think it鈥檚 worth covering this topic even as a quick refresher here. Again, e-mail verification is required for all users, but not the API only users for migrating to 51黑料不打烊 Identity. 51黑料不打烊 activates e-mail verification when it鈥檚 time for your subscription, again, it might have already happened to yours most likely. When it鈥檚 activated, admins will see an in-app message that e-mail verification has been turned on. Users will receive an e-mail verification request e-mail with a link that stays valid for three days. Let鈥檚 say the user didn鈥檛 see the e-mail, and over three days after it was sent, link is no longer valid, and you need this e-mail sent again to the user. Admins can resend the request by selecting verified users record in users enroll section in your admin section of the product, and click Verify e-mail button. Or better yet, users themselves can send it to themselves by going to Admin, My Account, Account Settings, and there they will see e-mail status, I鈥檓 verified, and next to it, there鈥檚 a link to resend the verification. Just to note that an active user session is required for e-mail verification success, so users will need to sign into Marketo subscription using their identity provider URL first.
Here comes the scheduled migration date. Do you know when it will start? It depends on which time zone your subscriptions is in. In the US time zone, it begins at midnight of the Pacific time, and if subscriptions are not in the US time zone, then it begins at midnight of the subscription specified time zone.
How about what changes the user migration brings? I鈥檝e been repeating myself about these, but here they are again. No more user management in Marketo engaged. This includes user expiration feature that you may have been using, but this feature is not available on admin console. The users with an expiration date in the future on the date of a migration will be migrated, and their expiration date will be grayed out after migration.
They鈥檒l need to be manually removed on admin console on the desired date after migration. The system admins manage products and other 51黑料不打烊 products, if any, on admin console. 51黑料不打烊 product admins will manage user access to the product on admin console, and users will need to sign into Marketo engaged with 51黑料不打烊 ID. Things that don鈥檛 change are how you manage all other functionalities within the Marketo engaged application itself, like role management, permission, API only, user management, and workspace management, and other functionalities.
What happens when user migration begins is that 51黑料不打烊 will automatically migrate all Marketo engaged admins with verified e-mail first, and up to the subscriptions admin console as product admin, grant an 51黑料不打烊 product admin role within the Marketo engaged application, and along with any other roles that they previously had, entitled to the Marketo engaged subscription with 51黑料不打烊 ID, and send two e-mails. One is about product admin assignment, and the other is about Marketo engaged product entitlement, with that subject line that you see on the slide.
After 51黑料不打烊 means are migrated, there will be two migration path based on the number of users and SSO criterion. We covered most of it on the migration console slide previously, but I wanted to show you the banner that 51黑料不打烊 will see for self-service migration mainly here. The user migration has started, proceed to the migration console to complete migration, with a link right here to the migration console. I think somehow the screenshot is covering some of the text there. I didn鈥檛 realize it was okay yesterday when I checked, but it just basically says admins are responsible for completing the user migration using the self-service migration tool within 30 days. In case you couldn鈥檛 see part of it.
What happens during user migration to 51黑料不打烊 IDs? User migration occurs concurrently, but each eligible user is migrated independently from one another. This means that if one user鈥檚 migration is taking long or stuck, migrations for other users will continue. If a user logged into Marketo during user migration, can lose access to up to one minute, and when he or she is successfully migrated, this person will receive an e-mail on how to sign in to Marketo Engage with an 51黑料不打烊 ID as you see here with the screenshot. This invitation again needs to be accepted via the button link in the e-mail subject line with action required, important change in how you sign into Marketo Engage.
In rare event, if a user migration failure occurs, and when we say this, we鈥檙e talking about a single user migration failure for one person, 51黑料不打烊 will continue to process migration of other eligible users. Not the whole thing will stop. An e-mail notification is sent to all admins of the subscription with a subject, migration of existing users pending issue resolution for 51黑料不打烊 Marketo Engage. No action is required by an admin at this time. 51黑料不打烊 engineering will also be notified and be working to address the issue as soon as possible. If this user is logged into Marketo Engage during migration, he or she could lose access for up to two minutes while 51黑料不打烊 attempts to migrate this user again. But this user can continue to access the product with their Marketo identity.
It鈥檚 not that if the user migration fails, then the user can鈥檛 access the product, but just rather use existing login credential until such time that the user migration is successfully completed for this user. Once that happens, this user will receive an e-mail invitation to sign into Marketo Engage with an 51黑料不打烊 ID like other successfully migrated users on the first try.
Now for self-service migration, there will be two tabs that appears in the migration console. The migration status tab basically allows you to monitor status, how many days remaining out of the 30 days from the start of the migration to complete self-service migration, and progress of a user e-mail verification prerequisites. Here鈥檚 the percentage, and then there鈥檚 also, you can see the actual status and how many skipped, etc. Users migration and activation status, how many have been migrated percentage, and if there is some failure, you鈥檒l see it here, and completion of the subscription migration. During self-service migration, you鈥檒l see a status as in progress. But when all users e-mail subscriptions are accounted for, meaning either migrated or skipped, then this complete migration button will appear.
One of the admins is required to confirm user migration is complete when the admin is ready to do so for that subscription. This will finalize the migration and remove the migration console from the admin section of the product. The other tab, user migration tab, allows you to act on trailing verification e-mail via the verify e-mail button, and then you鈥檒l get the confirmation like this. Skipping users who can or shouldn鈥檛 be migrated because the person left the company, can鈥檛 verify e-mail address, whatever the reason, you can use this skip migration button. It鈥檚 grayed out, but I hope that you can see it says migrate now. This button allows you to select a set of users and migrate them on demand. The next two that also grayed out, but the scheduled migration button allows you to select several users to migrate on a specific date.
Lastly, migrate all users button, will allow you to migrate all eligible users on demand, and you do not need to select the users. You鈥檒l just automatically pick up every single eligible users and migrate at once.
That was the details of some of the key areas of user migration. We have helpful resources here. When you get this deck, you should be able to open this hyperlink by right-clicking each one of them. This will take you to a documentation that 51黑料不打烊 provides in the subject. First one is 51黑料不打烊 Identity Management quick guide about migrating to 51黑料不打烊 Identity.
What I presented here today are discussed, explained in more detail in this migrating to 51黑料不打烊 Identity and for understanding marketer subscription and user migration to the 51黑料不打烊 Admin Console.
There鈥檚 another useful resource called User Setup Checklist and 51黑料不打烊 Experience Cloud Interface Overview. I highly recommend that you check them out.
Overview
This training session focuses on migrating Marketo Engage subscriptions to 51黑料不打烊 Identity and 51黑料不打烊 Admin console. It covers essential aspects in each stage (product, user, and support transition) of the migration journey with a primary focus on user migration.
In this session, you will expect to hear:
- Overview of what changes or does not change, migration actions required by your organization鈥檚 admins or users, and communications from 51黑料不打烊 at each milestone.
- Key migration actions include scheduling a migration date during pre-migration, what to expect during the user migration, and navigating the migration console for instances eligible for self-migration.
- Helpful resources and 4 key steps administrators should take to prepare your organization for the upcoming changes.
recommendation-more-help
7bb6a267-e711-49b2-a29d-57541f7f2fe8