Account Manager 3.10

This B2C Commerce Account Manager release is available on July 1, 2026.

This release delivers:

  • Security fixes
  • Bug fixes
  • Infrastructure updates
  • Download Account Manager Audit Log Events
    When examining Account Manager audit logs in Log Center, you can now export the data in CSV format. Audit log events in Log Center were introduced in Account Manager 3.8, providing insight into changes to users, API clients, and organizations. Use filters and keyword searches to track specific field changes or action events within a selected time frame and then export the audit logs for further analysis or record-keeping.
  • Update API Integration to Use /dwsso/oauth2 Endpoint
    The /dw/oauth2 endpoint is now deprecated in favor of the more performant /dwsso/oauth2 endpoint. Salesforce plans to remove the /dw/oauth2 endpoint in February 2027. Until February 2027, plan for incremental reductions in rate limits for the /dw/oauth2 endpoint. To avoid service disruption, update your API integrations, including redirects from /dw/oauth2, to use the /dwsso/oauth2 endpoint before February 2027.
  • Deprecated Roles Are Now Automatically Unassigned from Users
    Following the deprecated role removal announcement in version 3.9, Account Manager has unassigned deprecated roles from users. To address any future assignment of deprecated roles, which no longer provide access to B2C services, Account Manager continually unassigns the roles from users within an organization at regular intervals. This behavior ensures that only current, supported roles remain active in your organization.
  • Limit API Clients to a Single Organization
    In the 3.6 release, Account Manager began identifying shared API clients with indicators and warnings. Now, Account Manager enforces single-organization assignment for new API clients. For existing API clients, Account Manager prevents account administrators from adding more organizations. If you have existing API clients assigned to multiple organizations, consider migrating them to single-organization assignments. This practice improves security by reducing the risk of unintended cross-organization access.