After installing the Distributed Marketing managed package, you can add up to 200 business units to your account. You can choose which users to share the business units with to control access to content. Distributed Marketing uses named principal authentication with the OAuth 2.0 protocol.
Required Editions
| User Permissions Needed | |
|---|---|
| To configure account authentication: | DMAdministrator License permission set, Administrator permission (mcdm_15 namespace), Manage Auth Providers, Modify All Data, and Customize Application |
| To maintain an active integration: | Custom Application |
Important Authenticated calls execute in the context of the user who adds a business
unit to Distributed Marketing. So any requests for new authenticated tokens run in the context
of this user on behalf of all Distributed Marketing users. The authenticating user for each
business unit is logged in the Execute As field on the named credential’s associated Auth.
Provider. This user must have the permissions outlined to maintain an active integration and
must be an active user for the duration of Distributed Marketing being used. You can change this
user for a specific business unit by editing the business unit’s associated Auth.
Provider.
A dedicated Marketing Cloud Engagement user is recommended for system authentication, is required per authenticated business unit, and needs these Marketing Cloud Engagement permissions:
| Content Builder: Assets | View, Subscriber Preview |
| Content Builder: Folders | View |
| Email: Subscribers: Subscriber | Create, View, Update |
| Email: Subscribers: Data Extension | Create, View, Update, Delete, Manage Data |
| Email: Content: Email | Preview, View |
| Interaction Studio | Access |
| Journey Builder | Access, View |
Note
- Distributed Marketing uses custom components.
- If you’re using Financial Services Cloud, access the Distributed Marketing Business Unit Setup page directly. Navigate to Visualforce Pages in Setup, select PostInstallPage, and click Preview. Then continue with step 5.
- Deselect Enforce login IP Ranges on every request for Session Settings. You can enable it again after account authentication.
- Content Builder: Assets > Subscriber Preview is only needed for customers using SMS.
-
Log out of all Marketing Cloud Engagement sessions.
Important Salesforce automatically authenticates against logged-in Marketing Cloud Engagement sessions. If you don’t log out of active sessions, Salesforce can connect to the incorrect Marketing Cloud Engagement account.
- In Salesforce, from the App Launcher, find, and open Distributed Marketing Administration.
-
In Business Units, select Add Business Unit.
Note The system redirects you from Distributed Marketing Administration to the Distributed Marketing Business Unit Setup page.
- Follow the prompts on the Distributed Marketing Business Unit Setup page to configure your account.
-
To get the latest authentication status for connected business units, navigate to
Distributed Marketing Administration, and click the Update Connection
Information button.
Tip To change the display name for the business unit, hover over the display name, and select the pencil.Note Don’t forget to re-enable Enforce Login IP Ranges on every request.
- Upgrade to Tenant-Specific Endpoints Authentication
To enhance the performance of the Marketing Cloud Engagement platform, tenant-specific subdomains are assigned automatically to all customers. This automatic assignment improves API performance, creates a faster experience, and is required for some Marketing Cloud Engagement data centers. You can self-update any connected business units not already using Tenant-Specific Endpoints (TSE) authentication without disrupting any existing connections. All new connections automatically use TSE authentication.