Let's say some customer installs the app from appExchange to his marketing cloud, and using outh2 authentication flow, app can get his subdomain and other api endpoints. Now, Can the app extract data from marketing cloud to some external location like AWS or Heroku even after he logs out of his account?

  • If the question is with view point of Marketing cloud, then answer is Yes. The REST APIs just need the CLIENT-ID and CLIENT-SECRETE and a valid end point. Nov 21, 2019 at 10:17
  • So, it will be only one time authentication then app can extract data at anytime? Nov 21, 2019 at 17:52

1 Answer 1


When getting an access token, you will need to request the offline scope.


Doing so will return a refresh token in the response, which you can store and use to get a new access token at a later date/time without a user signed in. This will allow you to run background processes.

  • So background process can run till we have refresh token lifetime. If the lifetime expires customer has to authenticate again. Am I correct? Nov 23, 2019 at 3:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .