Knowledgebase

Featured article

(Article Updated - August 2024) Overview A blocklist is a database of IP addresses or domains that have been associated with the sending of unsolicited commercial email or spam. Internet Service Providers (ISPs) and business email networks use information from blocklists to filter out unwanted email. As a result there can be a drop to inbox delivery rates if the IPs or domains involved with sending email are listed on a blocklist. Marketo’s Email Delivery and Compliance team monitors blocklist activity on our IPs and domains daily. When an impactful listing occurs, we reach out to the blocklist, attempt to identify the sender that triggered it, and work with the blocklist organization to get the listing resolved. There are thousands of blocklists, most will not have a significant impact on your delivery rates. Below, we have compiled a list of the blocklists that commonly appear across our sender ecosystem. Each blocklist has been grouped into a top tier (Tier I) by most impactful, to the bottom least impactful tier (Tier III). These may have little to no impact across our sender network. Tier I Blocklist Spamhaus (SBL) Impact: Spamhaus is the only blocklist that we categorize as a Tier I for a reason: it has by far the greatest impact on delivery. It is the most well-respected and widely used blocklist in the world. A listing at Spamhaus will have a negative effect on your ability to deliver emails to your customer’s inbox and can cause bounce rates of over 50%. Evidence suggests that most of the top North American ISPs use Spamhaus to inform blocking decisions. How it works: Unlike many blocklists, Spamhaus lists senders manually. This means they are proactively watching sender activity, collecting data, and base listings on a number of variables. Most commonly senders are listed for mailing to spam trap addresses that Spamhaus owns. Sometimes Spamhaus will list senders based on recipient feedback as well. Next Steps: Please note that every Spamhaus email can be quite different depending on the information provided and the nature of the listing . Because Spamhaus has multiple types of listings, the remediation steps are based on which type of blocklisting has occurred. We have listed the most common types to affect Marketo customers, from most to least impactful. Impact can range from a full block of top severity, to a partial block that is less severe (CSS Data, DBL). If remediation isn’t performed and the problem not addressed, these listings can increase in severity and turn into a full blocklisting. Spamhaus Blocklistings Types SBL (full blocklisting) Considered the most impactful. Remediation steps: Our team monitors closely for Spamhaus listings. Once alerted to the listing, we send an email notifying the customer, and reach out to the Spamhaus contact to start the remediation process. Only a Marketo delivery team member should be in direct correspondence with the Spamhaus contact, to speak on behalf of the customer, and to relay their questions and instructions, ensuring quick resolution and reduced impact. Senders that trigger this listing on a shared IP range will be moved to a more isolated, penalty range (IPB), so as not to impact the other shared senders. Those affected on a Dedicated IP, only impact their own sending and will not be moved. However, depending on the severity of the issue, our team may need to revoke a customer’s ability to send any emails until full resolution. The listing will last until Spamhaus is satisfied that the offending sender has taken the appropriate steps to mitigate the problem. SBL CSS Customers are alerted of the listing with an email containing all the information needed to immediately begin the remediation process. This is part of an automated trigger listing, that allows for a customer to delist directly on the Spamhaus website, after they’ve completed remediation. Remediation steps: Customers will go to the Spamhaus IP lookup website, at https://check.spamhaus.org, where they can check on the status of their IP and continue to monitor it in real time, until it is no longer listed there. Follow the remediation and delisting instructions provided, and check for specific details in the blocklist notification email. DBL (Domain blocklisting) Customers will receive an email notification alerting of the company domain being listed. The email will contain specific information to help narrow down and identify which email source likely triggered it within Marketo. It’s important to note that any email sent from outside of Marketo, that contained the company domain, is suspect. This means, if the sender uses multiple IPs and/multiple email platforms, then any of those could be the source. Remediation steps: Follow the detailed instructions in the email, which will also provide a link to the Spamhaus Domain reputation checker webpage, to check the real time listing status of the affected domain. Once the email source is identified and cause addressed, this customer will follow the online instructions to request to be delisted. Tier II Blocklist SpamCop Impact: SpamCop is not used by any of the major North American ISPs to inform blocking decisions, but it makes it to the Tier II list because it can have a significant impact on B2B email campaigns. SpamCop is considered a Tier I one blocklist for B2B marketers but a Tier II for B2C marketers. SpamCop is a dynamic IP blocklist, that can affect a single IP or a subset of IPs Typically, the block will automatically lift within one business day, but can take longer for relisted IPs. To have triggered a SpamCop listing likely means the sender has a list management problem that should be addressed. How it works: SpamCop lists IPs for one of two reasons: Either the email hit SpamCop spam trap addresses OR A SpamCop user has reported the email unwanted. Most of SpamCop’s spam traps are previously valid addresses that have not been active for 12 months or longer. Remediation steps: If you are seeing a significant number of bouncing emails caused by a SpamCop blocked IP but aren’t sure if your email activity triggered the listing, first identify whether you are sending on a shared sender network or not. If sending from a shared IP range when this occurs, you or any other customer sending from the same network may have contributed to the IP block. This IP block will automatically get dropped within a business day. For those on a Dedicated IP that trigger a listing, refer to the above remediation steps and resources, to address the list management issue. Tier III Blocklist (Low/ No impact ) These are considered the lowest tier and therefore cause the least impact across the Marketo sender ecosystem. Some of these blocklists were more impactful at one time, while others are only impactful based on the sender region (Manitu). Others still can suddenly flare up (Lashback). There are also many blocklists that are ignored (0spam), and are not taken seriously because they do not provide any means to delist once on the list (NoSolicitado) or that they charge money to have the listing removed ( UCEPROTECT ). The pay-to-delist model is not well respected in the email industry. When using blocklist tool checkers, such as MXToolBox, many blocklists will appear, but very few are relevant. Here is our selection of Blocklists you may come across that are least impactful: Project Honey Pot SpamAssassin URIBL/SURBL DrMX PSBL 0spam HostKarma Ascams ZapBL Barracuda Trendmicro Inc. Cloudmark Proofpoint Invaluement ISP Blocklists Some ISPs use internal blocklists to make blocking decisions. Examples include AOL, Yahoo, Gmail, Outlook and Hotmail. If your IP is being blocked by one of these networks, and those networks have a large presence in your lists, a block of this kind could have a noticeable negative impact on delivery. Marketo monitors for significant ISP blocks. Those experiencing deliverability issues with emails not making it to the Inbox and bulking in the spam folder may benefit from additional services with our Email Delivery Consultants. Remediation Steps: Email Delivery Compliance Team works to resolve any ISP blocks. ISP blocks are are usually resolved or lifted within less than 24 hours of a delisting request. Customers experiencing significant blocks for Microsoft domains (outlook.com, live.com, microsoft.com), can submit a request to the delivery team to seek mitigation on their behalf. Additional Resources: Blocklist Deep Dive Abuse Report Deep Dive What is a spamtrap, or spam trap, and why does it matter? Blocklist remediation Blocklist resolution flowchart Successful lead reconfirmation What is a blocklist?

Issue You may experience this error when we create campaigns in SFDC using Marketo Campaign sync through a program. Solution The error that we are receiving indicates that the User Profile that Marketo uses to log into Salesforce doesn't have permissions inside of SFDC to create campaigns. To test this, log into Salesforce using the Marketo sync credentials and try to create an SFDC campaign. If you are unable to do so, then Marketo cannot create campaigns via the sync. You would need to work with your SFDC Admin to grant the Marketo sync user permission to create campaigns in SFDC. If still there is an error, please contact the Salesforce support team, since this error is coming from Salesforce.

Issue You already have a Marketo connected to an instance of Salesforce and want to switch to a different instance of SFDC. Solution This is not possible. Once you have connected your Marketo instance to an instance of SFDC, that connection cannot be changed. If you want to connect Marketo to a different instance of SFDC, you would need to contact your Customer Success Manager to have a new Marketo instance provisioned.

Issue An update made in the CRM is taking longer than expected to sync to Marketo via the usual sync cycle. You need to avoid this for some of the data being passed between the two systems. Solution Some delay in the sync is expected. It all depends on the current sync status, as well as how much data is being synced. One possible workaround would be to use API calls to push data into Marketo immediately. To make API calls into Marketo, you'll need to do the following Create an API Only User Role Create an API Only User Create a Custom Service for Use with ReST API From there, you will be able to create API calls from your CRM and access API endpoints with this user to make updates in Marketo. This method can also be used to sync data between Marketo and unsupported or custom CRMs. Note: You will need to work with a developer to create the API calls. Marketo Support are not trained as developers, so if you need assistance creating your API calls, you will need to work with Marketo Professional Services instead.

When a Salesforce-specific flow step runs, sometimes extra steps are performed automatically. Here are the rules, so you know: These rules will apply when the lead is not currently in Salesforce.com as a contact or lead. Marketo Flow step Automatic Action Add to SFDC Campaign Sync Lead to SFDC Change Status in SFDC Campaign Sync Lead to SFDC Add to SFDC Campaign Change Owner Sync Lead to SFDC Convert Lead Sync Lead to SFDC Create Task Sync Lead to SFDC You can filter out SFDC records in a Smart List using the SFDC Type Filter with the operator set to "is not empty". All SFDC records have a value in this field.

When using Marketo it is not a requirement to set up DNS text records for SPF and DKIM. However, Marketo recommends setting up SPF and DKIM because it improves the deliverability of your mailings. Configuring and implementing one or both of these records is a way to verify that the server sending your mail is authorized to do so. If a recipient domain is configured to check for SPF and/or DKIM and those DNS records are available and your mail passes the SPF/DKIM check, it further reinforces its good reputation. Not implementing SPF/DKIM records does not add to or subtract from its reputation, it’s just not there. Please note, not all domains check for SPF/DKIM and if this is the case, again, the presence of these records does not add or subtract from your mail’s deliverability. There is no negative effect to setting up these records, and it can improve your deliverability. It is for these reasons that Marketo recommends setting up these DNS records and configuring their use in your instance of Marketo. For more information on how to set up and configure SPF/DKIM, please read our KB article here.

Issue: You have a Salesforce lead field that is not currently in Marketo but you want to have in it Marketo for use. Solution: Login to Salesforce as a System Administrator user. Identify the Salesforce profile that is being used by the Marketo sync user by clicking on Setup -> Manage Users -> Users Once you have identified the Salesforce profile being used by the Marketo sync user, you will need to make the Salesforce field visible to the Salesforce profile of the Marketo sync user. You do this via "Field-Level Security" setting for the field in Salesforce. In Salesforce: Click on Your name at the top right of the screen -> Setup -> App Setup -> Customize -> Click the Salesforce object the field is under. i.e. Leads, Contacts, Accounts, Opportunities -> Fields Click on the Field Label hyperlink Click on the "Set Field-Level security" button -> check the "Visible" checkbox next to the Salesforce profile that is being used by the Marketo sync user. Only the "Visible" checkbox must be checked. The "Read Only" checkbox must be checked. In the following screenshot below, notice the different checkbox options for the "Backup User" Salesforce field. However, only 1 option combination will work correctly - i.e. the option with only the "Visible" checkbox checked. Some standard Salesforce fields even though you have correctly followed the instructions above, simply do not sync to Marketo. One example of this is the "Rating" field on the Account object.

Included in this article Overview Use Sync User Login Check Field Level Security Overview If you've ever had trouble getting a field or field value to sync between Salesforce and Marketo, the most common problem is that the Salesforce sync user doesn't have permissions to access that field. Since different users have different permissions to access fields based on their roles, not every field or record is visible to every user. However, there can be cases when a user needs access to fields which are not accessible. For example, if a program needs to be tested but the field is not accessible, or the user may have been simply missed from the permissions. In such cases, you can check whether the sync user can see that field. Use Sync User Login To find if your sync user has permissions to access the field, check the Salesforce integration ID. Navigate to Admin > Salesforce and check the Credentials. This will give you the login ID. Your Salesforce Admin should have the password for that login ID. Next, log into your CRM using those SFDC sync user credentials. Navigate to the lead/contact record. Check to see if the field shows on the lead record. If the field is not visible, that means that your sync user does not have permissions enable to access that field. Check Field Level Security If the field isn't visible, we need to check the Field Level Security for the fields. This is where the fields will be listed with checkboxes indicating whether the field is to be accessible or not. 1. Go to Setup. 2. Navigate to your Profile. 3. Go to the section “Field Permissions.” Here you’ll be able to see the fields and their corresponding permissions. Restricted permissions could be a reason why the SFDC sync user cannot see a field or record. Therefore, you may need to make changes here to allow permissions to view it.

Marketo calls to the Salesforce API During a single sync session, Marketo makes 25 API calls to check if your Salesforce objects need updating. Because your Salesforce sync happens in 5 minute intervals (default setting), each day Marketo makes 7200 API calls to your account to see if any updates are needed. If there are updates, more API calls are used to sync the information. Leads, Contacts, Accounts, Opportunities, Campaigns, and Activities are synced in batches of 200 per API call. If you use a Sync Lead to SFDC or Add to Campaign flow step in trigger campaigns, each one uses at least one API call per lead; the API call happens when the lead hits that flow step (instead of waiting for the next sync). Batch campaigns can send up to 200 leads to Salesforce with 1 API call for these flow steps. Any activities you've synced from Marketo to Salesforce (like "Filled Out Form" or "Opened Email") use an extra API call per event. You can use these to estimate the number of API calls Marketo makes per day. For example, if you have 1,000 Lead and Contact updates a day and 100 Account, Opportunity, and Campaign updates, you'll use: 7200 (check for updates) + (1000 Lead updates / 200 per API call) + (1000 Contact updates / 200 per API call) + (100 Account updates / 200 per API call) + (100 Opportunity updates / 200 per API call) + (100 Campaign updates / 200 per API call) + 7200 + 5 + 5 + 1 + 1 + 1 = 7213 API calls When you first sync your Salesforce account to Marketo, you'll use significantly more API calls until Marketo is up to date with your Salesforce instance. After that, you can expect the API calls to be much lower unless you make large updates to your leads (in Marketo or Salesforce) API Calls and your Salesforce edition Salesforce determines your API call limit based on the edition and licenses you have. This document from Salesforce has information on how they calculate that limit. For many Salesforce users, particularly Enterprise Edition users, the number of API calls made by Marketo is usually not a problem. If you're using a more limited edition of Salesforce or don't have many Salesforce licenses, you may hit the daily limit on your API calls. In that case, please contact Marketo Support and ask us to decrease your sync interval. At a 30 minute sync interval, Marketo uses around 1000 API calls per day, well under the limit for nearly every Salesforce edition. To see your API limit (per 24 hour period) and your current usage (for past 24 hours) in SFDC, navigate to: Setup -> Administration Setup -> Company Profile -> Company Information Look for the field called "API Requests, Last 24 Hours", which will display API usage for the past 24-hour period as well as your current 24-hour limit (in parenthesis). Order of Events during SFDC Sync Marketo will sync your SFDC and Marketo objects in the following order: Lead: synch schema Account: synch schema Contact: synch schema User: synch schema Task: synch schema Opportunity: synch schema Opportunity Contact Role: synch schema Campaign: synch schema Campaign Member: synch schema Campaign Member Status: synch schema Lead: pull conversions Account: pull deletes Account: pull updates User: pull updates Lead Queue: pull updates Lead Status: pull updates Account Type: pull updates Lead: pull deletes Contact: pull deletes Lead: pull updates Contact: pull updates Lead: push updates Contact: push updates Campaign: pull deletes Campaign Member: pull deletes Campaign Member Status: pull deletes Campaign: pull updates Campaign Member: pull updates Campaign Member Status: pull updates Opportunity: pull deletes Opportunity Contact Role: pull deletes Opportunity: pull updates Opportunity Contact Role: pull updates Event: pull updates Task: pull updates Email Template: push new Email Template: push updates Task: push new Task: push updates

Marketo has the ability to see and pull data from Salesforce Formula fields, there is however a catch which will be explained in this article. Everytime the Marketo Sync connects to Salesforce, it will scan records and look at the "SytemModStamp" (salesforce system field) for each one of them. It will compare this value with the stored value, which was pulled at the last scheduled sync. If the values match, Marketo will move on to the next record. If the values are different (new value later date than previous value), then Marketo will do a compare and contrast of all fields on that record in both systems and update the information as needed. When a normal non-formula field is updated and changed on a Lead/Contact record in SFDC, the SytemModStamp value is updated. This is how on next sync Marketo knows to do a compare/contrast check and pull updates. Formula fields do not behave the same way. A formula field is calculated based on data in fields called upon in the formula; this means that the formula field calculation itself will not update the SytemModStamp in Salesforce. Chances are you already have existing records in SFDC and Marketo. If you were to create a formula field today in your instance of SFDC and have it sync down into Marketo, the data calculated for the formula field in SFDC will not come into Marketo right away. The reason for this is, the formula field has created data based on already existing data, this does not result in a SytemModStamp change. Typically formula fields will be a calculation of data from fields which are somehow related to the lead/contact record. This means that moving forward, any change in the normal field, will result in a SytemModStamp change as well as a recalculation of the formula field. In this case, Marketo will see the updated SytemModStamp due to the normal field change. Marketo will do the compare/contrast excercise and find that the formula field also needs updating. If you create a formula field in SFDC and would like to have all the historical data for the formula field to come into Marketo, you can force an update on the records in SFDC to update the SytemModStamp. This way, on next sync, Marketo will see the formula data and pull it in. Alternatively, you can simply allow for natural SytemModStamp updates in SFDC to occur which should result in a slow trickle of historical data from SFDC into Marketo for the newly created formula field. You can only use data from a formula field in Marketo to segment data and filter. If you try to do a change data value, Marketo will accept the change, tries to sync it to Salesforce and fails to update there. Eventually the Salesforce calculated value will come back into Marketo.

The fields and records that will sync from Salesforce are defined by the permissions of the Marketo sync user. Therefore, if you want to prevent specific records or fields from syncing with Marketo, change the permissions of the sync user so they do not have access to the records and fields you do want to sync. Alternatively, you can work with Marketo Support to set up a Custom Sync Filter that will prevent records from syncing based on the value in a specified field. Restricting Leads from Syncing to SFDC With Sync Filters

Issue Users for your Marketo instance are unable to log into the instance. Solution Check your landing page URLs and email links. If these are also unavailable, your Marketo instance may have been shut off. Marketo Support can confirm whether your instance has been deactivated, but are not able to reactivate it. In this situation, please contact your Marketo Account Representative to discuss the status of the instance and regaining access.

Issue How and where to locate Salesforce ORG ID. Solution Choose one of the following options to find your Org ID: Improved Setup User Interface (Enabled) 1. Select Setup | Company Profile | Company Information. 2. In the "Organization Detail" section, your Organization ID is listed in the "Salesforce.com Organization ID" field, starting with 00Dxxx. Improved Setup User Interface (Disabled) 1. Select <YourName> | Setup | Company Profile | Company Information. 2. In the "Organization Detail" section, your Organization ID is listed in the "Salesforce.com Organization ID" field, starting with 00Dxxx. Lightning Experience 1. Click the Gear icon, then select Setup. 2. Select Settings | Company Settings | Company Information. 3. Your Organization ID is listed in the "Salesforce.com Organization ID" field, starting with 00Dxxx

Issue You come across a few leads who failed to sync to SFDC and would like to have the list of leads who faced the same issue. Solution Unfortunately Marketo doesn't have a specific type of filter to leads who failed to sync to SFDC. However if they are new leads who haven’t synced to SFDC, then you can filter them by using the filters "Person was created" and "SFDC Type" with condition "is empty". If you want to find the list of leads (previously synced to SFDC) who failed to sync among a particular group of leads, you can filter by following the below steps. 1. Create a new Boolean type field in SFDC namely "Sync Error?" and with the default value as "true". 2. Wait for the field to sync into Marketo. 3. Create a Smart Campaign to select those group of records and the flow steps to change the value of the Boolean field "Sync Error?" to ”False" and then "Sync person to SFDC". 4. Once the campaign has finished running, you will be to pull a report on SFDC on the list of leads who have the value "True" for the field "Sync Error?". It means that the value was not updated to SFDC as the record failed to sync. With this list you will be able to select the records and resolve the sync issue. You can also create a smart list of leads who were never able to sync with the following filters: Lead was synced to SFDC : Assign to : is not empty SFDC Type: is Empty

Issue You created a picklist field in SFDC and want to know if that field will sync down to Marketo with the field type of picklist. Solution Marketo has a picklist option in form fields, but not in Lead Database fields. When you sync a field from SFDC that has the type of picklist, this field will show in Marketo with a type of String. However, when you create a form, the field type for your field will show as "select," which is a picklist.

Issue You create a new field on the Lead and Contact objects in SFDC and two fields are created in Marketo, one mapped to Lead and the other mapped to Contact. Solution You will see this behavior if the an SFDC field is created on two objects across more than one sync cycle, one before a sync cycle starts and the other one during or after the sync cycle completes. To ensure both the lead and contact show up mapped to the same custom field Marketo, do the following Disable the global sync in Marketo. (Admin > Salesforce) Create the field on your desired objects in SFDC. Make sure they both have the same API name. Re-enable the global sync in Marketo, allowing the field in both objects to sync down to Marketo at the same time. If you find yourself with multiple fields in Marketo after the sync, contact Marketo Support to have the fields merged or remapped as necessary.

Can Marketo make updates to the Account object in Salesforce? Out of the box when you get your new Marketo instance and go through connecting it with Salesforce we restrict ourselves from making any changes to the Account object in Salesforce. You are probably use to seeing two way data sync for all objects such as Leads and Contacts, however Account works in a single direction: We have made this design decision in part due to the following scenario: John Doh works for Marketo but also runs a small business on the side Marketo currently has about 200 employees He has filled out a form with "Marketo" as his company The next time he fills out a form he does it on behalf of his own business and changes the company name in the form to "John's Small Business" but fails to change the Email Address If Account Write permissions are enabled, everyone in SFDC associated to Marketo (all 200 people) will now be associated to John's Small Business! As such we have decided to stop Marketo from making any updates to the Account object out of the box. If you want to enable Marketo to make Account level updates in Salesforce we can definitely enable this for you however you must make considerations and move forwardcautiously so that you do not run into any unwanted behavior. If you want Marketo to update all Account fields except for Account Name, you can accomplish this by making use of the "Block Field Updates" feature. This can help stop any updates from happening in the Marketo database from sources such as Form Fill-Out, List Import... Once you have given this topic enough thought and planned out which fields you will be blocking from updates and from which sources, you can: Ask your enablement manager for this change if you are in the enablement process Submit a support ticket if you are out of enablement and flying solo

What is HSTS? The HTTP Strict-Transport-Security response header (often abbreviated as HSTS) lets a web site tell browsers that it should only be accessed using HTTPS, instead of using HTTP. This prevents man-in-the-middle attacks by telling the browser it should never interact with their domain without first establishing a secure HTTPS connection. What does this mean for Marketo assets? A domain can assert the HSTS policy for all of it's subdomains. This means both the subdomains used for Marketo landing pages and the subdomains for Marketo tracking links must also be secured with SSL certificates. If HSTS is asserted and the Marketo subdomains are not secured, people that visit landing pages or click on tracked links in emails will receive security errors and browsers will not load the pages. This is resolved by purchasing both Secured Domains for Landing Pages and Secured Domains for Tracking Links. There are very few exceptions where a domain utilizing HSTS will not need to secure both landing page domains and tracking link domains. How do I know if my domain is using HSTS? Reach out to your IT and/or web development team to confirm whether or not your domain utilizes HSTS and if both Secured Domains and Tracking Links are necessary for your business. If your website utilizes HSTS and has the "include subdomains" flag set to true, you will need to secure both your landing page domains and tracking link domains in almost all circumstances. Google Chrome has a built in HSTS checker that you can use to verify your HSTS settings. 1. Visit the root domain of your website with the Chrome browser. For example, if your Marketo landing pages use visit.acme.com, navigate to acme.com. This will load the domain's HSTS policy into Chrome. 2. Navigate to chrome://net-internals/#hsts in Chrome. This will load Chrome's HSTS checker. 3. In the "Query HSTS/PKP domain" section, type in your domain you wish to check. Click "Query". This is a article attached image 4. If the query returns "Found" with a list of configuration settings, you will need to check two settings: If either "status_upgrade_mode" or "dynamic_upgrade_mode" have the value "FORCE_HTTPS" or "STRICT", then the domain is enforcing HSTS and all connections are made over HTTPS. If either "static_pkb_include_subdomains" or "dynamic_pkp_include_subdomains" are equal to "true", then all subdomains are subject to the HSTS policy. If both of the above are true then both Secured Domains for Landing Pages and Tracking Links may be required. If the query returns "Not Found", or is not using a "FORCE_HTTPS" or "STRICT" policy then the landing page and tracking link subdomains may not have strict HTTPS requirements. Always verify with your IT and/or web development team as to what your domain's security policies and requirements are. Failure to properly secure your landing page or tracking domains according to your domain's security policy may result in landing pages or tracking links not resolving in browsers. A lack of a strict HSTS policy does not necessarily mean you do not need to secure your Marketo domains. My domain asserts HSTS on my subdomains but I do not have HTTPS encryption with my Marketo subscription. What do I do? Reach out to your Customer Success Manager to discuss purchasing Secured Domains for Landing Pages and Secured Domains for Tracking Links. Configuration instructions can be found below: Overview & FAQ: Secured Domains for Landing Pages Overview & FAQ: Secured Domains for Tracking Links

Issue Issue Description API Only user is not appearing when creating a service in [Admin > LaunchPoint] Solution Issue Resolution It is highly likely that the reason why the API user was not appearing because it did not have "API Only" ticked. This can be checked in [Admin > Users & Roles > User > Edit User]. However, this cannot be modified once the API user is created, so in order for the API user to appear in LaunchPoint, "API Only" must be ticked when the API user is created. Reference: Create an API Only User Role Who This Solution Applies To Admin users

Knowledgebase

Maintaining a Directory of Leads Bouncing Emails

Top Blocklists - What You Need to Know

SFDC Campaign Sync Error - Failed: CANNOT_INSERT_UPDATE_ACTIVATE_ENTITY: entity type cannot be inserted: Campaign

Switching the Marketo Sync to a New Salesforce Instance

Syncing Between CRM and Marketo Outside of the Sync Cycle

Implied Salesforce Actions

What Are the Possible Effects of Not Setting Up SPF/DKIM Records?

How to make a Salesforce field available in Marketo

How to check if an SFDC sync user can see a field

How Marketo Uses the Salesforce API

How Does Marketo See and Pull Data from Salesforce Formula Fields?

How Do I Block Certain Leads/Contacts in Salesforce from Synching into Marketo?

Unable to Access Marketo Instance

How to Locate Your Salesforce ORG ID

Find Records in Marketo That Have Not Synced to Salesforce

Filter Out the List of Leads Who Failed to Sync to SFDC

Editing SFDC Custom Objects in Marketo

Picklist Field Type in SFDC and Marketo

Creating a New Field in SFDC Creates Two Fields in Marketo

Can Marketo Make Updates to the Account Object in Salesforce?

SSL: The HSTS Policy and Your Marketo Subdomains

API Only User Is Not Appearing When Creating a Service In Admin > LaunchPoint