Upgrade to Tenant-Specific Endpoints Authentication

To enhance the performance of the Marketing Cloud Engagement platform, tenant-specific subdomains are assigned automatically to all customers. This automatic assignment improves API performance, creates a faster experience, and is required for some Marketing Cloud Engagement data centers. You can self-update any connected business units not already using Tenant-Specific Endpoints (TSE) authentication without disrupting any existing connections. All new connections automatically use TSE authentication.

Required Editions

User Permissions Needed
To enable authentication for Tenant-Specific Subdomains: DMAdministrator license

These instructions apply only to business units added before January 2020.

  1. Log out of any active Marketing Cloud Engagement sessions.
  2. In Salesforce, navigate to AppLauncher.
  3. Select Distributed Marketing Administration.
  4. In the Administration section, navigate to the Critical Updates section. Any authenticated business units using non-TSE authentication appear in the Business Units Ready to Prepare table. For example, Business_unit.
    Tip
    Tip If you don’t see anything here, all of your business units are authenticated using the appropriate authentication method.
  5. In the Business Units Ready to Prepare table, determine the business unit you want to update, and select the Prepare Business Unit button. The business unit is removed from the table.
  6. In the Administration section, navigate to Business Units. When the business unit is ready, it appears in the Business Units component under Administration > Business Units appended with _tse_migration. For example, Business_unit_tse_migration.
  7. In the Business Units component, click Complete Log In on the new business unit. Log in using your unique Marketing Cloud Engagement system user for Distributed Marketing.
  8. Navigate back to the Business Units section.
  9. Click the Update Connection Information button, and confirm the connection for the new business unit. For example, Business_unit_tse_migration.
    Note
    Note Now, your new business unit is authenticated. However, all of your existing campaigns and quick send messages are accessed using the business unit that uses non-TSE authentication. Update your existing campaigns and quick send messages to use the newly authenticated business unit next.
  10. In the Administration section, navigate to Critical Updates. Any business units that were authenticated using the TSE authentication created with this migration flow appear. For example, Business_unit_tse_migration.
  11. In the Business Units Ready to Upgrade table, determine the business unit to upgrade, and select the Upgrade Business Unit button. The business unit is removed from the table and the system upgrades all connected Campaigns and Quick Send messages to use TSE authentication. When the migration is complete, the business unit appears in the Business Units component in the Business Units section in Administration. The business unit appears without the tse_migration suffix, for example, Business_unit. The business unit authenticated using non-TSE authentication is appended with _deprecated. For example, Business_unit_deprecated.
  12. Delete the business unit authenticated with legacy authentication.