How to Rotate a Salesforce Marketing Cloud Client Secret

Issue

Your Salesforce Marketing Cloud client secret has expired or is about to expire, and you need to update it for your Fivetran connection.

Environment

Connector: Salesforce Marketing Cloud

Resolution

To rotate your client secret, do the following:

1. In Salesforce Marketing Cloud, select Take action here in the secret-expiration notice if it is available. Otherwise, go to Setup > Platform Tools > Apps > Installed Packages.
2. Find and open the installed package used for your connection. In the Components section, open the API Integration component.
3. Under Staged Secret, click Generate.
4. Enter a description for the new secret and click Next.
5. Make a note of the new client secret and store it securely. You cannot view the secret again after closing this screen. Click Finish.
6. On the API Integration component page, click Activate next to the staged secret. Confirm that you understand the change when prompted.
7. In Fivetran, edit your Salesforce Marketing Cloud connection, replace the Client Secret with the new value, and select Save & Test.

If the installed package or API Integration component was deleted, create a replacement package and API Integration by following the client ID and client secret setup instructions, then enter the replacement credentials in Fivetran.

Cause

Salesforce Marketing Cloud client secrets expire 180 days after generation. Rotate each secret before it expires to avoid interrupting the connection. For more information, see Salesforce client secret rotation guidance.