We are a marketing cloud ISV. We are in the process of creating our first app for marketing cloud. We wanted to know that when we list the app on appExchange and some client/organisation/marketer installs our app then how are we going to get the clientID, client secret, subdomain, wsdl file, other endpoints (soap, rest, authentication etc) pertaining to that marketing cloud account.

Thanks in advance,


As per this documentation you should use a single credential set:

AppExchange Partners: Use the Same Client ID and Client Secret

Multi-tenant AppExchange apps use the same client ID and client secret for all of their customers. Marketing Cloud automatically enables this as part of the AppExchange app publishing and installation process.

More details on the authorisation itself can also be found in this thread: OAuth Authorization Flow for AppExchange Packages

  • I understood that we will be using the same ClientID and client secret which is generated at the time of developing, but how will we get the subdomian of the customer's account to initiate authorization flow. Nov 20 '19 at 12:13
  • Your application receives the customer’s Marketing Cloud subdomain, or tssd, and an authorization code after the customer has authorized your application by logging in to Marketing Cloud, as part of the authorization code grant type for web app integrations. Nov 20 '19 at 12:36
  • So just to clarify, initial authorization code request will be made by using our subdomain in url, then we will receive subdomain of the customer in the response of that request, and we can then use customer's subdomain for API calls. Am I correct? Nov 20 '19 at 15:16
  • Yes, that's correct Nov 21 '19 at 10:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.