We are a marketing cloud ISV. We are in the process of creating our first app for marketing cloud. We wanted to know that when we list the app on appExchange and some client/organisation/marketer installs our app then how are we going to get the clientID, client secret, subdomain, wsdl file, other endpoints (soap, rest, authentication etc) pertaining to that marketing cloud account.

Thanks in advance,

1 Answer 1


As per this documentation you should use a single credential set:

AppExchange Partners: Use the Same Client ID and Client Secret

Multi-tenant AppExchange apps use the same client ID and client secret for all of their customers. Marketing Cloud automatically enables this as part of the AppExchange app publishing and installation process.

More details on the authorisation itself can also be found in this thread: OAuth Authorization Flow for AppExchange Packages

  • I understood that we will be using the same ClientID and client secret which is generated at the time of developing, but how will we get the subdomian of the customer's account to initiate authorization flow. Commented Nov 20, 2019 at 12:13
  • Your application receives the customer’s Marketing Cloud subdomain, or tssd, and an authorization code after the customer has authorized your application by logging in to Marketing Cloud, as part of the authorization code grant type for web app integrations. Commented Nov 20, 2019 at 12:36
  • So just to clarify, initial authorization code request will be made by using our subdomain in url, then we will receive subdomain of the customer in the response of that request, and we can then use customer's subdomain for API calls. Am I correct? Commented Nov 20, 2019 at 15:16
  • Yes, that's correct Commented Nov 21, 2019 at 10:46

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .