Loading

Security-Related Product Updates to Marketing Cloud Engagement

Udgivelsesdato: Aug 12, 2026
Beskrivelse

This page serves as the ongoing roadmap for critical security-related product changes to Marketing Cloud Engagement. Our intention is to provide you with the necessary lead time, technical clarity, and architectural guidance to maintain the security of your data as these changes are rolled out.

Please note that this roadmap focuses on specific features designed to minimize risk from phishing attacks, data exfiltration, and account takeover attempts. It is evolving and not inclusive of all Salesforce security-related changes.

Find details for each planned change in the table below.

Security Control

Implementation Timeline /

Recommendations

Knowledge Article / Resources

Step-up Authentication

July 30, 2026: Rollout staggered over 5 days

Step-Up Authentication in Marketing Cloud Engagement

Secret Expiration and Time-To-Live

September 30, 2026

Marketing Cloud Engagement Secret Expiration and Time-To-Live (TTL)

IP Allowlisting

July 30, 2026: Recommendations start for IP allowlisting. Technical enforcement is planned for the future; details will be emailed.

Mandatory IP Allowlisting in Marketing Cloud Engagement

Phishing-Resistant Multi-Factor Authentication for Admins

Status: Currently strongly recommended.  Technical enforcement is planned for the future; guidance will follow.

Phishing Resistant MFA (PR-MFA) for High-Privilege Marketing Cloud Engagement Administrator Accounts

Multi-Factor Authentication for SSO Users

Status: MFA for SSO users has been required since February 1, 2022. Technical enforcement is planned for the future; guidance will follow.

MFA Requirement for Marketing Cloud Engagement (MCE) SSO Users

 

Løsning

Change Log

Date

Change

August 11, 2026

Added the link to the new article for MFA Requirement for Marketing Cloud Engagement (MCE) SSO Users

July 21, 2026

Corrected timelines:

  • IP allowlist recommendations start July 30, 2026.
  • Phishing-Resistant Multi-Factor Authentication (PR-MFA) for Admins, and Multi-Factor Authentication (MFA) for SSO Users: enforcement planned for the future but the specific timeline are yet to be finalized. Guidance will follow

July 16, 2026

Initial publication

 

Vidensartikelnummer

005389116

 
Indlæser
Salesforce Help | Article