Let me provide a complete solution covering all three aspects of your notification failure:
1. Workflow Notification Step Configuration:
First, verify your workflow model’s notification step is properly configured. Open the workflow in the Workflow Model Editor:
- Locate the ‘Participant Step’ where approvers are assigned
- Check that ‘Notify User via Email’ is enabled in the step properties
- Verify the ‘Email Subject’ and ‘Email Body’ fields are populated
- Confirm the ‘Notify’ option is set to ‘Assignee’ or appropriate participant group
The fact that your workflow progresses correctly but skips notifications suggests the notification step might be configured but the underlying email service is failing. The workflow engine catches email failures silently to prevent workflow interruption - that’s why you don’t see errors in workflow logs.
2. SMTP Configuration After Infrastructure Change:
Your mail server migration from port 25 to port 587 with TLS requires comprehensive SMTP reconfiguration. Navigate to OSGi Console > Configuration > Day CQ Mail Service:
Update these settings to match your new mail infrastructure:
- SMTP Server Hostname: mail.company.com (verify this is correct)
- SMTP Server Port: 587 (changed from 25)
- SMTP over TLS: ENABLED (critical for port 587)
- SMTP Authentication: ENABLED (most modern mail servers require this)
- SMTP User: [service account username]
- SMTP Password: [service account password]
- From Address: noreply@company.com (ensure this is an allowed sender)
Additionally, in the ‘Additional Properties’ field, add:
mail.smtp.starttls.enable=true
mail.smtp.starttls.required=true
mail.smtp.ssl.protocols=TLSv1.2
The starttls.required=true setting is important - it forces TLS negotiation and will fail explicitly if TLS can’t be established, giving you clearer error messages.
Network and Firewall Considerations:
After mail server migration, verify:
- Your AEM server’s IP address is whitelisted on the new mail server
- Outbound port 587 is open on the AEM server’s firewall
- DNS resolution works correctly for mail.company.com from the AEM server
- If using a relay, ensure relay authentication is configured
Test connectivity from the AEM server command line:
telnet mail.company.com 587
You should see a connection established. If it times out, you have a network/firewall issue to resolve with IT.
3. Email Template Reference Validation:
While email templates aren’t affected by SMTP changes, verify they’re still valid:
- Navigate to /etc/workflow/notification/email/default in CRXDE
- Check that your workflow’s email template exists and is readable
- Common template paths:
- /etc/workflow/notification/email/default/html.txt (HTML format)
- /etc/workflow/notification/email/default/txt.txt (Plain text fallback)
Verify template placeholders are correct:
- ${workflowTitle} - workflow name
- ${workItem.workflowTitle} - task title
- ${payloadPath} - content path
- ${recipientName} - assignee name
If you have custom email templates, ensure they reference valid workflow variables. Template errors can cause silent notification failures.
Testing and Verification:
After updating SMTP configuration:
-
Test Mail Service Directly:
- In Day CQ Mail Service config, use ‘Send Test Email’ button
- Enter a test recipient address
- If this fails, SMTP config is still incorrect
- Check error.log immediately after test for detailed error messages
-
Test Workflow Notification:
- Create a simple test workflow with just a notification step
- Assign it to yourself
- Trigger the workflow
- Check if you receive the notification email
-
Monitor Logs:
- Watch error.log while testing: `tail -f error.log | grep -i mail
- Look for authentication errors, connection timeouts, or TLS handshake failures
- Common errors after migration: ‘Authentication failed’, ‘TLS required’, ‘Relay access denied’
Common Post-Migration Issues:
- Authentication Failure: New mail server requires credentials but service account not configured
- TLS Version Mismatch: Old TLS 1.0/1.1 disabled on new server, need to specify TLSv1.2+
- Sender Policy: New mail server restricts ‘From’ addresses - ensure noreply@company.com is allowed
- Rate Limiting: New server has stricter rate limits - if bulk notifications, may need throttling
Long-term Monitoring:
Set up monitoring for email notification health:
- Create a scheduled test workflow that sends notification daily
- Monitor delivery success rate
- Alert if test notifications fail
- Document SMTP configuration in runbook for future migrations
Once you’ve updated the SMTP configuration with TLS settings and verified connectivity, your workflow notifications should resume. The key is ensuring all three components align: the workflow notification step is configured, SMTP service is properly connected with TLS, and email templates are valid. Test thoroughly before announcing to users that notifications are working again.
This draft is based on general Adobe Experience Cloud knowledge. It has not been verified against your specific version and environment. Practitioners: verify the steps and share your experience below.