Skip to main content
What you can do:
  • Ingest Workfront tasks into Gradial with full context
  • Filter tasks by project, program, portfolio, status, or custom fields
  • Trigger Gradial execution when tasks match your criteria
  • Write results — previews, links, comments, status updates — back to the Workfront task

​
Prerequisites

Service account requirements:
  • A dedicated Workfront integration account — not a personal user
  • Created and managed by a Workfront system admin
  • Must have visibility into all tasks and projects you intend to sync
Required permissions for the service account:
CapabilityMinimum access required
TasksRead all relevant fields, including custom fields
CommentsRead / Write
AssignmentsAbility to reassign tasks when configured
Permissions are granted through Workfront Access Levels, project- or portfolio-level sharing, or object-level permissions. See Adobe’s documentation on Access Levels and Permissions for configuration guidance. Authentication-specific requirements:
MethodAdditional requirements
API KeyAPI Key generated from the service account’s Workfront settings
OAuth 2.0 JWTAdobe Workfront OAuth application with JWT flow enabled; Client ID, Client Secret, Customer ID, User ID, and Private Key (PEM)
Use API Key if your Workfront instance has not migrated to Adobe Unified Access. Use OAuth 2.0 JWT if your organization enforces Adobe-identity-based authentication.

​
Authentication options

MethodBest forRequirements
API KeyStandard Workfront setupsService account email + API Key from Workfront settings
OAuth 2.0 JWTAdobe IMS / Unified Access environmentsAdobe OAuth app with JWT flow; Client ID, Secret, Customer ID, User ID, PEM key

​
Connect Workfront to Gradial

Go to Integrations in the Gradial sidebar, select Adobe Workfront, and click Add Integration. Then follow the steps for your authentication method.

​
Option A — API Key

  1. Enter your Workfront Base URL (e.g., https://your-company.my.workfront.com)
  2. Enter the service account email
  3. Paste your API Key
  4. Click Validate Connection
Once saved, credentials are stored securely and cannot be viewed. To update credentials, create a new integration.

​
Option B — OAuth 2.0 JWT (Server-to-Server)

  1. Select OAuth 2.0 JWT (Server-to-Server) as your authentication type
  2. Enter your Client ID and Client Secret
  3. Enter the Customer ID and User ID (service account)
  4. Paste the Private Key (PEM)
  5. Enter your Workfront Base URL
  6. Click Validate Connection

​
Configure routes

Once connected, create routes to define which Workfront tasks sync into which Gradial workspaces. Workfront supports filtering by portfolio, program, project, status, and custom fields. Configure Routes →

​
Troubleshooting

IssueLikely causeFix
Connection succeeds but no tasks returnedFilters too narrow or service account lacks visibilityBroaden filter criteria; confirm the account can see the target tasks
API Key connection failsExpired or incorrect keyRegenerate the API key; verify the Workfront domain
OAuth JWT failsMisconfigured OAuth app or wrong credentialsVerify the app supports JWT Bearer Flow; confirm all credential fields are correct
Service account cannot see tasksInsufficient Access Level or object sharingHave a Workfront admin review Access Levels and project sharing
Contact your Gradial Product Specialist or email [email protected] if issues persist.