---
schema_version: "1"
id: eba6e671b7d7a0531e61c97d06f71298b5fe906149170a3b95787815670d2c1a
title: Set Up the Account Engagement Sandbox-to-Production Flow
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/pardot_sf_connector_sandbox_flow.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.pardot_sf_connector_sandbox_flow.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: bb3ce64cdd0c483f0547d0339b3c6a188aa040608651b65a99a4dc028614e877
description: Copy changes and content from your Account Engagement sandbox to a production org with a preconfigured flow in Flow Builder. First, set up authentication between your sandbox org and the production org. Then, test the flow and add the flow component to record pages so that you can easily push changes to production.
products:
  - Marketing
  - Marketing Cloud Account Engagement
release: "264"
---
# Set Up the Account Engagement Sandbox-to-Production Flow

Copy changes and content from your Account Engagement sandbox to a production org with a preconfigured flow in Flow Builder. First, set up authentication between your sandbox org and the production org. Then, test the flow and add the flow component to record pages so that you can easily push changes to production.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <span>Account Engagement <strong>Advanced</strong> and <strong>Premium</strong> Editions</span></td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;"><span>Available for an additional cost in: Account Engagement <strong>Plus</strong> Edition</span></td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d60756e82">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d60756e82 ">To manage sandboxes:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d60756e82 ">
              <p>Customize Application</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Modify All Data</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d60756e82 ">To run the sandbox-to-production flow:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d60756e82 ">
              <p>Manage Flows</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Run Flows</p>
            </td>

          </tr>
        </tbody>
      </table>

Before you begin, verify that you have an integration user set up in your sandbox org has the Account Engagement Integration User permission set. You can create a dedicated integration user, or assign the permission set to an existing user in your org to be the integration user. See [Manage Permission Set Assignments](https://help.salesforce.com/s/articleView?id=platform.perm_sets_manage_assignments.htm&type=5&language=en_US).

![Warning](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-pardot-264-0-0-production-enus/5fef4d4f-9a34-45c6-8cd3-e3200b9eeba8/images/icon_warning.png)

Warning An Account Engagement sandbox is provisioned from a Salesforce sandbox. If you refresh the Salesforce sandbox, it deletes the related Account Engagement sandbox.

#### See Also

- [_Knowledge Article_: Troubleshooting Account Engagement Sandbox-to-Production](https://help.salesforce.com/s/articleView?id=000396734&type=1&language=en_US)

## Create an External Client App in Your Sandbox Org

To access the interface that authenticates to your production org, first create an external client app in your sandbox org.

1. From Setup in your sandbox org, use the Quick Find box to find and select **App Manager**.
2. Click **New External Client App**, and then enter the required details.
    1. Enter a name for the integration that identifies the environment you’re connecting to, such as Account Engagement Production. You use this name later.
    2. For Contact Email, enter the email address for the admin who manages the sandbox-to-production process.
    3. For the Distribution State, select **Local**.
3. Under API, select **Enable OAuth Settings** and enter the Callback URL for the org you’re authenticating to.
    
    You can find the callback URL in the org’s Setup under **Auth Providers > Sandbox Asset Flow Auth > Salesforce Configuration > Callback URL**.
4. Select these OAuth scopes:
    1. Manage user data via APIs
    2. Manage user data via Web browsers
    3. Perform requests at any time
    4. Access unique user identifiers
    5. Manage Pardot services
    6. Access the Salesforce API Platform
5. Under Security, make these selections:
    1. Select **Require Secret for Web Server Flow**.
    2. Select **Require Secret for Refresh Token Flow**.
    3. Select **Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows**.
6. Click **Create**.
    
    It can take up to 15 minutes for the app to be ready for authentication.
7. When the app is ready, copy the consumer key and secret for the next task.
    1. From the app record, under API (Enable OAuth Settings), click **Manage Consumer Details**.
    2. Authenticate if needed, and then copy the consumer key and secret.

## Update the Authentication Provider in Your Production Org

Next, use the consumer key and secret that you created in the previous task to update the authentication provider in your production org.

1. From Setup in your production org, use the Quick Find box to find and select **Auth Providers**.
2. Find and edit **Sandbox Asset Flow Auth**.
3. Select **Use Proof Key for Code Exchange (PKCE) Extension**.
4. In the Consumer Key field, paste the key you copied from the External Client App that you created.
5. In the Consumer Secret field, paste the secret you copied from the External Client App that you created.
6. Save your work.

## Create the Account Engagement API Named Credential

To grant Account Engagement API access to the integration user, create a named credential in your production org.

1. From Setup in your production org, use the Quick Find box to find and select **Named Credentials**.
2. Click the dropdown menu and select **New Legacy**. Don’t select New.
    
    ![Dropdown menu showing the New Legacy option.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-pardot-264-0-0-production-enus/5fef4d4f-9a34-45c6-8cd3-e3200b9eeba8/pardot/images/mcae_setup_named_credential.png)
3. Configure the named credential.
    1. Enter a label for the named credential, such as MCAE Access.
    2. For the URL, enter https://pi.demo.pardot.com.
    3. For the Identity Type, select **Named Principal**.
    4. For the Authentication Protocol, select **OAuth 2.0**.
    5. For the Authentication Provider, enter Sandbox Asset Flow Auth.
    6. For the Scope, enter pardot\_api refresh\_token.
    7. Select **Start Authentication Flow on Save**.
    8. Select **Generate Authorization Header**.
    9. Save your work.
4. When prompted, log in with the integration user’s credentials.

## Create the Sandbox API Named Credential

To grant the integration user access to your sandbox org's Salesforce APIs, create a named credential in your production org

1. From Setup in your production org, use the Quick Find box to find and select **Named Credentials**.
2. Click the dropdown menu and select **New Legacy**. Don’t select New.
    
    ![Dropdown menu showing the New Legacy option.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-pardot-264-0-0-production-enus/5fef4d4f-9a34-45c6-8cd3-e3200b9eeba8/pardot/images/mcae_setup_named_credential.png)
3. Configure the named credential.
    1. Enter a label for the named credential, such as Sandbox API Access.
    2. For the URL, enter the URL for your sandbox org. For example, https://mydomain–sandboxname.sandbox.my.salesforce.com where mydomain is your company domain and sandboxname is the name of your sandbox org.
    3. For the Identity Type, select **Named Principal**.
    4. For the Authentication Protocol, select **OAuth 2.0**.
    5. For the Authentication Provider, enter Sandbox Asset Flow Auth.
    6. For the Scope, enter api refresh\_token.
    7. Select **Start Authentication Flow on Save**.
    8. Select **Generate Authorization Header**.
    9. Save your work.
4. After you save the named credential, log in with the integration user's credentials.

You’re done setting up authentication. Next, test your setup to make sure that everything authenticates properly when you push from your sandbox to production org.

## Test Setup and Customize Record Pages

To verify that the preconfigured flow works, do a test run from your production org. When you’re done, add the flow component to record pages so that you can easily copy changes to production.

1. From Setup in your production org, use the Quick Find box to find and select **Flows** under Process Automations.
2. Find and open **Account Engagement Sandbox-Production Bulk Asset Copy Flow**.
3. From Flow Builder, click **Run**.
4. Follow the steps on the flow canvas.
    
    For Named Credential For Account Engagement API Access, select the Account Engagement API named credential that you created. For Named Credential For Salesforce API Access, select the Sandbox API named credential that you created.
5. After you finish testing, add the Flow component to Lightning record pages. See [Embed a Screen Flow in a Lightning Page](https://help.salesforce.com/s/articleView?id=platform.flow_distribute_internal_lab.htm&type=5&language=en_US).

When you're done, you can run the flow at any time from Flow Builder, or from any record page that contains the flow component.