> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gradial.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Workfront Integration

> Connect Gradial to Adobe Workfront to automatically ingest tasks and sync results back — supporting both API Key and OAuth 2.0 JWT authentication.

**What you can do:**

* Ingest Workfront tasks into Gradial with full context
* Filter tasks by project, program, portfolio, status, or custom fields
* Trigger Gradial execution when tasks match your criteria
* Write results — previews, links, comments, status updates — back to the Workfront task

***

## Prerequisites

**Service account requirements:**

* A dedicated Workfront integration account — not a personal user
* Created and managed by a Workfront system admin
* Must have visibility into all tasks and projects you intend to sync

**Required permissions for the service account:**

| Capability      | Minimum access required                           |
| --------------- | ------------------------------------------------- |
| **Tasks**       | Read all relevant fields, including custom fields |
| **Comments**    | Read / Write                                      |
| **Assignments** | Ability to reassign tasks when configured         |

Permissions are granted through Workfront Access Levels, project- or portfolio-level sharing, or object-level permissions. See Adobe's documentation on Access Levels and Permissions for configuration guidance.

**Authentication-specific requirements:**

| Method            | Additional requirements                                                                                                        |
| ----------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| **API Key**       | API Key generated from the service account's Workfront settings                                                                |
| **OAuth 2.0 JWT** | Adobe Workfront OAuth application with JWT flow enabled; Client ID, Client Secret, Customer ID, User ID, and Private Key (PEM) |

<Tip>
  Use **API Key** if your Workfront instance has not migrated to Adobe Unified Access. Use **OAuth 2.0 JWT** if your organization enforces Adobe-identity-based authentication.
</Tip>

***

## Authentication options

| Method            | Best for                                | Requirements                                                                    |
| ----------------- | --------------------------------------- | ------------------------------------------------------------------------------- |
| **API Key**       | Standard Workfront setups               | Service account email + API Key from Workfront settings                         |
| **OAuth 2.0 JWT** | Adobe IMS / Unified Access environments | Adobe OAuth app with JWT flow; Client ID, Secret, Customer ID, User ID, PEM key |

***

## Connect Workfront to Gradial

Go to **Integrations** in the Gradial sidebar, select **Adobe Workfront**, and click **Add Integration**. Then follow the steps for your authentication method.

### Option A — API Key

1. Enter your **Workfront Base URL** (e.g., `https://your-company.my.workfront.com`)
2. Enter the **service account email**
3. Paste your **API Key**
4. Click **Validate Connection**

<Info>
  Once saved, credentials are stored securely and cannot be viewed. To update credentials, create a new integration.
</Info>

### Option B — OAuth 2.0 JWT (Server-to-Server)

1. Select **OAuth 2.0 JWT (Server-to-Server)** as your authentication type
2. Enter your **Client ID** and **Client Secret**
3. Enter the **Customer ID** and **User ID** (service account)
4. Paste the **Private Key (PEM)**
5. Enter your **Workfront Base URL**
6. Click **Validate Connection**

***

## Configure routes

Once connected, create routes to define which Workfront tasks sync into which Gradial workspaces. Workfront supports filtering by portfolio, program, project, status, and custom fields.

[Configure Routes →](/docs/integrations-administration-and-setup/how-gradial-works-with-ticketing-systems/routing-tickets)

***

## Troubleshooting

| Issue                                     | Likely cause                                           | Fix                                                                                |
| ----------------------------------------- | ------------------------------------------------------ | ---------------------------------------------------------------------------------- |
| Connection succeeds but no tasks returned | Filters too narrow or service account lacks visibility | Broaden filter criteria; confirm the account can see the target tasks              |
| API Key connection fails                  | Expired or incorrect key                               | Regenerate the API key; verify the Workfront domain                                |
| OAuth JWT fails                           | Misconfigured OAuth app or wrong credentials           | Verify the app supports JWT Bearer Flow; confirm all credential fields are correct |
| Service account cannot see tasks          | Insufficient Access Level or object sharing            | Have a Workfront admin review Access Levels and project sharing                    |

Contact your Gradial Product Specialist or email [support@gradial.com](mailto:support@gradial.com) if issues persist.