This document applies only to api integrations in legacy packages.
Salesforce marketing cloud security token.
Marketing cloud returns an access token.
Change the time on your server.
Follow industry best practices to securely store the refresh token on an external platform.
Your application must extract the access token and store it safely.
If using the exact target php soap api and unable to change the time on your server you will need to edit helpers soap wsse php specifically the addusertoken function.
To get those endpoints and tokens you need to do a few things.
For your authentication requests we recommend using our tenant specific marketing cloud branded endpoint structure which includes your tenant s subdomain.
Protect the access token as you would protect user credentials.
This is the same issue as invalid security token the solution was either.
Even small businesses can use marketing automation that will help bring in new customers and nurture the ones they already have without an army of marketers.
Plus you re required to use oauth tokens to access these endpoints.
Get an access token.
Always enforce tls when making calls to the marketing cloud apis.
And the marketing cloud rest and soap apis are no exception.
Use the access token to authenticate your soap calls in the header.
Plan personalize and optimize the customer journey know your customers better and measure your results so you can maximize your marketing budget with email marketing from marketing cloud.
To get an access token for oauth 2 0 api integrations review set up your development environment for enhanced packages.
The marketing cloud user for your integrated account must have the installed package administer permission.
Marketing cloud provides tenant specific endpoints to help secure your api requests more on this in a minute.
Keep the access token in memory only and request a new access token when needed.
It ensures among other things that if a user s account credentials are compromised a third party wouldn t be able to access salesforce via api or from an untrusted network.
I used this code in landing page instead of client id and client secret i have given salesforce connected app client id and client secret but its not returning access token is this correct way to get access token from exact target landing page using oauth 2 0.
Get an access token for legacy packages.
Treat the refresh token like a salesforce credential.