In our company a 3rd party vendor group created a single page that has combination of amp script and SSJS for custom preference center. From a security stand point, I was trying to figure out how authentication is handled to make call to our sales cloud instance. In the code i don't see any usage of any tokens(No oauth related info).
My question is what are the different ways of handling authentication from custom preference center?(Do they use the connected app used for data extension?)
NOTE: I cannot post our code because of security reasons(I wish i could).