Configuring Graph Modeling Connection

17/09/2026

Graphwise for Adobe Experience Manager 1.0

This section explains how to connect Adobe Experience Manager (AEM) to your Graph Modeling environment. It describes the available connection properties, how to configure them, and the authentication options supported by the connector. It also explains how authentication is handled during communication between AEM and Graphwise to help ensure secure and reliable connectivity.

To connect AEM to your Graph Modeling instance, create a OSGi configuration for the ai.graphwise.aemconnector.config.PoolPartyConnectionConfiguration.

Important

This configuration must be deployed to the author run mode only.

The following tables provides information over the properties used when configuring the Graph Modeling connection.

Setting	Default	Required when
`PoolPartyUrl`	-	Always. The base URL of your Graph Modeling instance (without a trailing slash).
`authenticationType`	`OAUTH2`	Always. Authentication method: `OAUTH2` `API_Key`
`keycloakServerUrl`	Empty	OAuth
`keycloakRealm`	`poolparty`	OAuth
`username`	Empty	OAuth
`password`	Empty	OAuth - secret
`clientId`	`ppt`	OAuth
`clientSecret`	Empty	OAuth - secret
`apiKey`	Empty	API-key mode - secret
`apiKeyHeader`	`X-API-Key`	API-key mode, if your deployment uses a different header
`apiKeyPrefix`	Empty	API-key mode, if a prefix such as `ApiKey` or `Bearer` is required

Before you can synchronize taxonomies or use auto-tagging, you must configure a connection to your Graph Modeling instance. The following steps describe how to configure the Graph Modeling connection.

Choose an Authentication Strategy: Determine whether your Graph Modeling deployment authenticates using OAuth2 (Keycloak) or an API key.
Create the OSGi configuration file: Create a Sling .cfg.json file inside an author run-mode folder using OAuth2 or an API key.
Protect secrets: Use Cloud Manager's environment-secret syntax $ [secret:...]. On 6.5 LTS, substitute what your organization uses to keep secret out of Git.

This section provides an overview of the authentication methods supported by the connector and explains how each method works. Expand a section to view details about a specific authentication type.

OAuth authentication connects AEM to Graph Modeling using service account credentials.

Uses the password grant (service account username, password, client ID and client secret).
Requires no browser interaction, user redirects, or registered redirect URIs.
Access tokens are cached for 60 seconds by default to ensure revoked credentials expire quickly.
The token cache is keyed to the entire connection configuration, changing any setting invalidates the cache immediately without requiring a restart.

In this section: