---
schema_version: "1"
id: 0e07033057ae746a81176dd80bad04a6f84e47e8477005385fef7e3d46bd3220
title: Set Up Connected App Authentication
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_co_set_up_authentication.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_co_set_up_authentication.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 236cb449f629d657ada555b054bd92007115246c7cb96918b9e5c4e9a95393d6
description: Set up connected app authentication for Marketing Cloud Connect for Marketing Cloud Engagement. This mechanism authenticates between Sales Cloud, Service Cloud, and Engagement without requiring you to store passwords in Engagement. It also prevents SOAP and REST API calls made by Marketing Cloud Connect from counting against your rolling 24-hour limit.
products:
  - Marketing
  - Cross Cloud
release: "264"
---
# Set Up Connected App Authentication

Set up connected app authentication for Marketing Cloud Connect for Marketing Cloud Engagement. This mechanism authenticates between Sales Cloud, Service Cloud, and Engagement without requiring you to store passwords in Engagement. It also prevents SOAP and REST API calls made by Marketing Cloud Connect from counting against your rolling 24-hour limit.

1. In the Sales or Service Cloud, click **Setup**.
2. Under Administer, click **Manage Apps**.
3. Click **Connected Apps**.
4. Click **Salesforce Marketing Cloud**.
5. Click **Edit Policies**.
6. Under Permitted Users, select **Admin approved users are pre-authorized**.
7. If a warning message appears, click **OK**.
8. Under IP Relaxation, select **Relax IP restrictions**.
9. Under Refresh Token Policy, select **Immediately expire refresh token**.
10. Save changes.
11. From Setup, click **Manage Users** under Administer.
12. Click **Permission Sets**.
13. Click **New**.
14. Give the permission set a memorable name. For example, Marketing Cloud Connected App.
15. Validate the generated API name and ensure that this field contains the desired value.
16. Save the permission set.
    
    Apply the permission sets to the API User: Marketing Cloud Connected App, Marketing Cloud Connector, Marketing Cloud Connector Admin, and Marketing Cloud System User.
17. From Setup, click **Manage Users** under Administer.
18. Click **Permission Sets**.
19. Click the name of the newly created permission.
20. Click **Manage Assignments**.
21. Click **Add Assignments**.
22. Select the users who need access to the connected app, typically those users who access Marketing Cloud Connect.
23. Make sure that the Salesforce system user is selected for access.
24. Click **Assign**.
25. Click **Done**.
26. In the Sales or Service Cloud, click **Setup**.
27. Under Administer, click **Manage Apps**.
28. Click **Connected Apps**.
29. Click **Salesforce Marketing Cloud**.
30. Click **Manage Permission Sets**.
31. Select the newly created permission set.
32. Save changes.
    
    ![Warning](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_cross-cloud_products-264-0-0-production-enus/bd617332-480f-48e8-b283-3477883c1320/images/icon_warning.png)
    
    Warning During this process, the system connects to any active Engagement session to establish the Marketing Cloud Connect API user. To prevent an incorrect connection, log out of all active Engagement sessions. Closing the tab doesn’t end an active session.
33. In Sales or Service Cloud, go to the Marketing Cloud tab.
34. Click **Connect to Marketing Cloud**.
35. Enter the username and password for the Marketing Cloud Connect API User.
36. Click **Login**.

![Configure CRM - Step 1](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_cross-cloud_products-264-0-0-production-enus/bd617332-480f-48e8-b283-3477883c1320/mc_cross-cloud_products/images/connect---3-1-configure-crm.png)

#### See Also

- [Marketing Cloud Connect User Types and Permissions](https://help.salesforce.com/s/articleView?id=mktg.mc_co_user_types_and_permissions.htm&release=264.0.0&type=5 "To use most Marketing Cloud Connect functionality, users need a license for Marketing Cloud Engagement and a license for Sales or Service Cloud. Understand the user types and permissions associated with Marketing Cloud Connect.")
- [Test the Connection in Marketing Cloud Connect](https://help.salesforce.com/s/articleView?id=mktg.mc_co_test_the_connection.htm&release=264.0.0&type=5 "Make sure that Marketing Cloud Connect for Marketing Cloud Engagement is set up correctly for sending.")
- [Manage Marketing Cloud Connect Settings](https://help.salesforce.com/s/articleView?id=mktg.mc_co_manage_settings.htm&release=264.0.0&type=5 "Admins access Marketing Cloud Connect for Marketing Cloud Engagement settings and send configuration by navigating to the Engagement object in the Sales or Service Cloud. Admins can configure these settings, including sends, tracking, users, and business units, after the installation and setup process to enable sending through Marketing Cloud Connect.")