Engagement - Troubleshoot "An Exception Occurred While Saving the Integration" Error with Marketing Cloud Connect

Diagnostic Steps— Check Login History First

1. Log in to Salesforce.
2. In Setup, type Users in the Quick Find box.
3. Click the connection user and open their Login History.
4. Filter for entries where the Application column shows "Salesforce Marketing Cloud" — these are access attempts from Marketing Cloud.
5. Check the Status column value to identify your scenario below.

Scenario Resolutions

Scenario 1: Status = "Restricted IP"

The Marketing Cloud IP address is not allowlisted in Salesforce. Add the required IP ranges to your Salesforce org's IP allowlist.

Reference: Allowlist IP Ranges for Salesforce Managed Packages

Scenario 2: Status = "Failed: Not Approved for Access" (or "Failed: Not Approved")

The profile or permission set assigned to the connection user has not been added to the Permitted Users under the Connected Apps policy settings for Marketing Cloud Connect. Add the user's profile or permission set to the Permitted Users list to resolve the error.

Reference: Set Up Authentication

Scenario 3: "Is Sandbox" Option Is Incorrectly Checked

The Is Sandbox option is checked but does not match the Salesforce org type being connected (e.g., Production org with Sandbox checked, or vice versa). This scenario does not leave a record in Login History.

Note: When attempting to Connect Account, please do so within an Incognito window

Scenario 4: Marketing Cloud Connected App Permission Set Missing

The integration user is missing the Marketing Cloud Connected App Permission Set. Without this permission set, the integration from Marketing Cloud to Salesforce will fail.

Reference: Upgrade to Connected App Authentication

Scenario 5: Salesforce Marketing Cloud App Is Blocked

The login appears successful in Salesforce Login History, but Marketing Cloud returns the following error:

Error: {"invalid_grant","error_description":"invalid authorization code"}

To resolve, unblock the app in Salesforce:

1. Go to Setup.
2. Navigate to Connected Apps OAuth Usage.
3. Find Salesforce Marketing Cloud and click Unblock.

Scenario 6: Salesforce Tracking Folders Missing

On the Salesforce Integration page in Marketing Cloud Setup, no values are available for tracking folders. To resolve:

1. Attempt to manually select the tracking folders.
2. If folders cannot be selected, verify the connection user has access to the Salesforce Single Send and Salesforce Mass Sends folders under Tracking.
3. If folders are missing entirely, confirm the user has both the Administrator and Marketing Cloud Administrator roles assigned.

Scenario 7: Salesforce Org Is Government Cloud

Government Cloud instances are typically on NA21 (Production) and CS32 (Sandbox). If you are attempting to connect Marketing Cloud to a Salesforce Government Cloud org, this error requires backend assistance.

Action: Submit a Salesforce Support case with Marketing Cloud Support for resolution.

Scenario 8: Forward-to-a-Friend Subscriber List Missing

The Forward-to-a-Friend Subscriber List may be missing on the Salesforce Integration configuration page in Marketing Cloud Setup, even when the FORWARD_TO_FRIEND Business Rule is enabled. This causes the connection to fail with the integration exception error.

Action: Submit a Salesforce Support case with Marketing Cloud Support to toggle the FORWARD_TO_FRIEND Business Rule.