Set Up Connected App Authentication

Set up connected app authentication for Marketing Cloud Connect for Marketing Cloud Engagement. This mechanism authenticates between Sales Cloud, Service Cloud, and Engagement without requiring you to store passwords in Engagement. It also prevents SOAP and REST API calls made by Marketing Cloud Connect from counting against your rolling 24-hour limit.

1. In the Sales or Service Cloud, click Setup.
2. Under Administer, click Manage Apps.
3. Click Connected Apps.
4. Click Salesforce Marketing Cloud.
5. Click Edit Policies.
6. Under Permitted Users, select Admin approved users are pre-authorized.
7. If a warning message appears, click OK.
8. Under IP Relaxation, select Relax IP restrictions.
9. Under Refresh Token Policy, select Immediately expire refresh token.
10. Save changes.
11. From Setup, click Manage Users under Administer.
12. Click Permission Sets.
13. Click New.
14. Give the permission set a memorable name. For example, Marketing Cloud Connected App.
15. Validate the generated API name and ensure that this field contains the desired value.
16. Save the permission set.
    Apply the permission sets to the API User: Marketing Cloud Connected App, Marketing Cloud Connector, Marketing Cloud Connector Admin, and Marketing Cloud System User.
17. From Setup, click Manage Users under Administer.
18. Click Permission Sets.
19. Click the name of the newly created permission.
20. Click Manage Assignments.
21. Click Add Assignments.
22. Select the users who need access to the connected app, typically those users who access Marketing Cloud Connect.
23. Make sure that the Salesforce system user is selected for access.
24. Click Assign.
25. Click Done.
26. In the Sales or Service Cloud, click Setup.
27. Under Administer, click Manage Apps.
28. Click Connected Apps.
29. Click Salesforce Marketing Cloud.
30. Click Manage Permission Sets.
31. Select the newly created permission set.
32. Save changes.
    

    Warning During this process, the system connects to any active Engagement session to establish the Marketing Cloud Connect API user. To prevent an incorrect connection, log out of all active Engagement sessions. Closing the tab doesn’t end an active session.
33. In Sales or Service Cloud, go to the Marketing Cloud tab.
34. Click Connect to Marketing Cloud.
35. Enter the username and password for the Marketing Cloud Connect API User.
36. Click Login.