Not supported on Cloud Service

Custom authentication handlers on AEM as a Cloud Service

Authors sign in with Adobe IMS on Cloud Service, so custom author-side login code goes away. Publish-side authentication for site visitors needs review against the supported SAML 2.0 handler and Cloud Service networking.

What to use instead

Adobe IMS for authors; the SAML 2.0 authentication handler or a reviewed custom handler for publish; OAuth server-to-server credentials for integrations (JWT credentials are deprecated).

How to fix it

1. Inventory AuthenticationHandler implementations and what they protect.
2. Move integrations from JWT service account credentials to OAuth server-to-server.
3. Design publish login with SAML or tokens and test with the CDN in front.

How we detect it

• Readiness scan rule custom-auth: Custom authentication handlers.

Best Practices Analyzer reports it under OAUI.

Can agents fix it?

Low. Authentication changes need an architect and a security review.

Source: Adobe Experience League. Checked 19 October 2026.