Installed Package Rotation (Salesforce Marketing Cloud)

Sept. 30 is a new date you need to aware of if you work with SFMC (ExactTarget). 

Installed Packages are the combination of a (1) Client ID, (2) Client Secret, (3) a set of Permissions and (4) Business Unit access that together permit authorized systems (and dictate the scope of access) to send data *IN* to SFMC. (This is also sometimes used for CloudPages or SSJS activites.)

Previously, once you established an Installed Package, it just worked behind the scenes, permitting access to systems that had the credentials until you disabled the package or changed the scope. To make SFMC more secure, there are a few recent things of note:

1. 1. Installed Packages that were not accessed in 180 days have been invalidated. (They won't work until you rotate the credentials.)
2. You can no longer view Installed Package credentials in SFMC. 
3. Remaining Installed Packages all received the same expiry date of 09/30/2026 when they'll stop working -- unless you rotate the credentials before that point. (New credentials automatically expire 180 days from creation.)

To rotate credentials, you'll follow a pattern like this. (Validate this is your InfoSec teams now, not late-September!)

Step 1. Navigate to Installed Packages under setup about one week before the credential is set to expire.

Step 2. Click "Generate" to establish a new "staged" credential. The new credential will appear on screen but never be shown again, so capture it. After a 5-minute waiting period, the credential is LIVE. At this point, your Installed Package has an OVERLAP - two credential sets that both work. (I think "staged" is a poor word choice here by Salesforce because it implies "prepositioned" or "standing by, reading to use" - perhaps in the future we'll have the ability to schedule these and that term will make more sense.)

Step 3. SECURELY share the new credential with the vendor or developer responsible for the inbound connection to SFMC. They will need to update their code but it should work right away. (You should have no interruption in service.)

Step 4. Once they have confirmed the credential works, return to SFMC and go back to the package and click "Activate" which deactivates the old code. I recommend this over just letting the old code expire on its own. (Again, I think this is a poor word choice by Salesforce to call this "Activate" as it does nothing to your new "staged" credential except make it the only surviving credential.)

Step 5. Look at the new expiration date and go into your calendar or ticketing system and establish a reminder for just this side of 180 days to repeat the process.

Note: Unlike AWS, this cannot be performed via API (you must have the proper Roles & Responsibilities within SFMC). 

Should you do this all at once for all your Installed Packages? It depends. There may be some economies of scale, but if one or more of your implementors have problems, your time performing Customer Support could be a big distraction.

Cross-posted: https://www.linkedin.com/feed/update/urn:li:activity:7443077624660230144/ 

120: Insecure Spontaneous Unpleasant Wilderness Coffeehouse Car Valet

Ok, let's give this a shot.  Thank you https://www.dylandrakes.com/writing-prompts

• Genre: Wilderness
• Location: Coffeehouse
• Conflict: Being assigned an unpleasant task
• Occupation: Car Valet
• Positive Trait: Spontaneous
• Negative Trait: Insecure

"Oh, it wasn't that bad," Fred admitted. But then he thought about it. "Well, it sort of was. The owner was nice, but that car was an absolute mess."

Penny stirred her coffee but said nothing. 

"But yeah," Fred continued, "I maintain cars for people. Not like private-jet people, but the first-class flyers, the sailboat owning crowds." He paused and then added "Some nice cars." Was this going well? He couldn't tell.

Penny smiled, but still said nothing.

"What about you? What do you do for work?" he prompted.

Several expressions flitted across her face in rapid succession but he had trouble catching them. 

Finally, she took in a deep breath, smiled and began to talk about her job as a park ranger and Fred realized that maybe going on about cars and his rich employers might have been at odds with her experiences. But, that seemed to have broken the ice and now she was positively radiating as she spoke of her love of nature and being able to get paid to spend her time outdoors. By the time the coffee was done, they'd committed to a second date: hiking. 

And since Gary and Nelly had pushed them together for this surprise date and were sitting by the door of the coffee shop, as they were leaving Fred and Penny were quite pleased to tell Gary and Nelly it was a double-date and they had a hike to look forward to in their future.

And just for fun, here's Gemini's take with the same prompt and characters...

The smell of burnt espresso beans usually felt like home, but today the Roasted Bean felt like a cage. Fred adjusted his damp car valet vest, his hands shaking slightly—a physical manifestation of the insecure voice in his head telling him he wasn’t cut out for this.

"Change of plans," Penny barked, slamming a rusted key ring onto the counter. "The mountain pass is blocked. We’re moving the fleet through the Blackwood wilderness trail. Fred, you’re driving the lead truck."

Fred froze. The Blackwood trail was a jagged ribbon of mud and unpredictable rockslides. Being assigned this unpleasant task felt like a death sentence for someone who usually just parked sedans in level lots.

"I... I don't know the terrain, Penny," Fred stammered.

"Gary and Nelly are already at the trailhead," she countered, eyes narrowing. "Don't overthink it, Fred. Just drive."

As he stepped out of the coffeehouse, the biting wind of the high country hit him. Suddenly, his spontaneous streak—the one that usually only surfaced when ordering off-menu—flared up. He didn't check the GPS or wait for a briefing. He hopped into the lead 4x4, cranked the engine, and roared toward the treeline before his anxiety could catch up. He might be terrified of a parallel park back in the city, but out here, where the road didn't exist, he felt a strange, frantic freedom.