Marketing Cloud Intelligence uses unique tokens to identify users and grant access to API resources. A user generates a token on the intelligence platform to be included in subsequent API calls. Account admins can enable or disable the Token API generator for specific users.
A token is valid for 24 months from the time it’s generated. The generated token is the only copy of the private key, and the user is responsible for storing it securely. When a user generates a new API token, the previous token expires immediately.
The token doesn’t display authentication data. The approved client authentication method is a JSON web token.
The process for creating and authorizing API tokens is as follows:
Note API access via JWT is now available, and will be enforced starting in Dec 2023. Until then,
existing (old) tokens will still be supported.
- Give Users API Access in Marketing Cloud Intelligence
An API token is required to perform actions via the Intelligence API. An admin must enable API access for a user to generate a token. - Create an API Service Account in Marketing Cloud Intelligence
You can create an API service account from your profile if you have API access. The client ID and private key are valid for 24 months. - Generate a JSON Web Token (JWT)
To obtain an access token, you need to generate a JWT with specific claims, and sign it using the RS256 algorithm with your private key. - Use the Access Token
After you have obtained the access token from the token request response, you can use it to make authenticated API calls to other endpoints.