An invalid security token was provided - How to get support

Question

I have a number of clients who use our integration with Salesforce Marketing Cloud. When things go astray it is quite difficult to resolve the issue as I have no access to the clients account.

We use a SOAP call, where we define the endpoint, and authenticate with a traditional username and password

      CustomBinding exactTargetBinding = new CustomBinding();
      exactTargetBinding.Name = "ExactTargetAPI";
      exactTargetBinding.CloseTimeout = new TimeSpan(0, 0, 30, 0);
      exactTargetBinding.OpenTimeout = new TimeSpan(0, 0, 30, 0);
      exactTargetBinding.ReceiveTimeout = new TimeSpan(0, 0, 30, 0);
      exactTargetBinding.SendTimeout = new TimeSpan(0, 0, 30, 0);

      TransportSecurityBindingElement securityBindingElement = SecurityBindingElement.CreateUserNameOverTransportBindingElement();
      TextMessageEncodingBindingElement textMessageEncodingBindingElement = new TextMessageEncodingBindingElement();
      textMessageEncodingBindingElement.MessageVersion = MessageVersion.Soap11WSAddressingAugust2004;
      HttpsTransportBindingElement httpsTransportBindingElement = new HttpsTransportBindingElement();
      httpsTransportBindingElement.MaxReceivedMessageSize = 655360000;

      exactTargetBinding.Elements.Add(securityBindingElement);
      exactTargetBinding.Elements.Add(textMessageEncodingBindingElement);
      exactTargetBinding.Elements.Add(httpsTransportBindingElement);

      exactTargetClient = new SoapClient(exactTargetBinding, new EndpointAddress(exactTargetWSServiceURL));
      exactTargetClient.ClientCredentials.UserName.UserName = username;
      exactTargetClient.ClientCredentials.UserName.Password = password;

When we make a SOAP call based on our clients endpoint, username and password, we get back an exception

An invalid security token was provided

at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Apteco.EmailResponse.ExactTarget.ExactTargetAPI.Soap.Extract(ExtractRequest1 request)
at 

My simple question is can a clients system be setup in such a way as to forbid the use of authentication by username and password?

And is there an email address where I can get a salesforce representative to fix the settings if things can be setup in this manner?

I know this is all a bit vague... 20 years ago I would just have sent an email to [email protected]

:-)

Thanks Simon

Answer 1

Using a token in a SOAP call can be done like this:

POST /Service.asmx HTTP/1.1
Host: YOURTENANTHERE.soap.marketingcloudapis.com

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:par="http://exacttarget.com/wsdl/partnerAPI">
    <soapenv:Header>
        <fueloauth xmlns="http://exacttarget.com">YOURTOKENHERE</fueloauth>
    </soapenv:Header>
    <soapenv:Body>
        <par:SystemStatusRequestMsg/>
    </soapenv:Body>
</soapenv:Envelope>

Answer 2

    private T CallSoapRequest<T>(Func<T> func)
    {
      if (useOAuth)
      {
        using (new OperationContextScope(exactTargetClient.InnerChannel))
        {
          // Add oAuth token to SOAP header.
          var xmlHeader = MessageHeader.CreateHeader("fueloauth", "http://exacttarget.com", restClient.GetAccessToken().Result.AccessToken);
          OperationContext.Current.OutgoingMessageHeaders.Add(xmlHeader);

          var httpRequest = new System.ServiceModel.Channels.HttpRequestMessageProperty();
          OperationContext.Current.OutgoingMessageProperties.Add(HttpRequestMessageProperty.Name, httpRequest);
          httpRequest.Headers.Add(HttpRequestHeader.UserAgent, "FuelSDK-C#-v1.3.0");

          return func();
        }
      }
      else
      {
        return func();
      }
    }