Prerequisites
Before setting up the Workfront integration with Mary, ensure you have:- Adobe Workfront account with admin permissions to create OAuth applications
- IT department coordination for creating OAuth2 applications
- allGood (Mary) account with any Access Level with at least these permissions:
- View Projects
- View Tasks
- View Documents
- View Users (make sure that the fine-tune setting of “View Contact Info” is turned on)
- Inbox access to the allGood (Mary) account to receive verification codes
Configuring Access Levels
Navigate to Setup > Access Levels in Workfront.



IT Coordination Guide
Security & Account Setup Requirements
- Create a dedicated OAuth2 single-page web application in your Workfront instance
- Configure application with appropriate permissions for allGood integration
- Collect required credentials: Client ID, Client Secret, and Organization Domain
- Store credentials securely according to company policy
- Have inbox access to the allGood (Mary) account to receive verification codes
Step-by-Step Setup
Create OAuth2 Application in Workfront
IT teams should follow the Adobe Workfront documentation to create the OAuth2 application:Create OAuth2 Applications — Adobe WorkfrontSummary of steps:




Important: Save the following credentials from the created application:
- Navigate to Setup > System > OAuth2 Applications


- Click Create app integration
- Select Single Page Web Application
- Enter application name (e.g., “allGood Integration”) and click Create

- Copy the Client ID and Client Secret — make sure to keep these in a safe location until the integration is complete
- Enter the Redirect URI:
https://allgoodhq.app/oauth2/workfront/callback

- Add the allGood logo to the application
- Add link to privacy policy:
https://www.allgoodhq.com/privacy-policy - Click Save

- Client ID
- Client Secret
- Organization Domain (e.g., your-company.my.workfront.com)
Configure Integration in allGood
- Log into allGood and navigate to Settings > Integrations
- Click Add Integration and select Workfront
- Enter the credentials from Step 1:
- Client ID
- Client Secret
- Organization Domain

Complete OAuth Connection
- After saving credentials, click Link your Workfront Account
- Make sure to keep your Client ID and Client Secret — you’ll need them again later
- Sign in using your Workfront Admin credentials
allGood needs access to event subscriptions and only System Admins can create such subscriptions. Once the subscriptions are created, the connection can be re-established with the Mary account (Step 5).
- Authorize allGood to access your Workfront instance

- Verify the integration shows as Active on your integrations page in allGood

Configure Subscriptions
- Click Edit on the Workfront Integration
- Click Subscribe in the Event Subscriptions section — this will automatically configure the subscriptions necessary for allGood to access your Workfront instance

- Verify that the two subscriptions were created

Reconnect with Mary Account
- Re-enter your Client ID and Client Secret and click Link your Workfront Account

- Sign in using your allGood (Mary) account credentials
- This is what gives Mary access to work on specific tasks assigned to her
You may need to enter a verification code when signing in with the allGood account. Please ensure you’re able to access the inbox linked to that email.
Verification & Testing
If Workfront shows “Active” status in allGood integrations, Mary was able to connect successfully.Simple Test
To confirm the integration is working properly in Workfront:- Create a task specifically named “Confirming Mary Access”

- Assign Mary to the task

- Look for a note left by Mary saying “Access confirmed. Thank you!” in the Updates page

Frequently Asked Questions
Do I need admin access to Workfront?
Do I need admin access to Workfront?
Yes, you need administrator access to set up the OAuth2 application and
create event subscriptions. Once subscriptions are configured, the
connection is re-established with the Mary account.
How do I authenticate with Workfront?
How do I authenticate with Workfront?
The integration uses OAuth 2.0 authentication. You’ll need to generate API
credentials via a dedicated OAuth2 application and configure them in allGood
during setup. The Redirect URI must be set to
https://allgoodhq.app/oauth2/workfront/callback.Why do I need to connect twice (Steps 3 and 5)?
Why do I need to connect twice (Steps 3 and 5)?
The first connection (Step 3) uses an Admin account to create the required
event subscriptions. The second connection (Step 5) links Mary’s account so
she can work on tasks assigned to her.
Can I sync specific projects only?
Can I sync specific projects only?
Yes, you can configure the integration to sync only specific projects,
portfolios, or teams based on your requirements.
What Workfront objects are supported?
What Workfront objects are supported?
The integration supports projects, tasks, users, teams, portfolios, and
custom forms from your Workfront instance.
How does resource management sync?
How does resource management sync?
Resource allocation, time tracking, and capacity planning data sync
bidirectionally to maintain consistency across platforms.
Troubleshooting
Why aren't my projects syncing?
Why aren't my projects syncing?
Common causes include:
- Insufficient user permissions
- API access restrictions
- Network connectivity issues
- Object-level sharing restrictions
How do I resolve authentication issues?
How do I resolve authentication issues?
Check your API credentials, verify user permissions, and ensure your Workfront instance allows API access from the allGood IP addresses.
I'm being asked for a verification code when connecting the Mary account
I'm being asked for a verification code when connecting the Mary account
This is expected. Ensure you have inbox access to the email address linked to the allGood (Mary) account so you can retrieve the verification code.
Where can I get help?
Where can I get help?
- Review this page for setup steps and common issues
- Contact our support team for technical assistance