SOLVED

Oauth Client Secret Rotation

Go to solution
RWeinsh
Level 1

Oauth Client Secret Rotation

Hey! We would like to know if the api supports Oauth Client Secret Rotation.
We would like to rotate our application client secret without impacting the current tokens.
Is this supported?

1 ACCEPTED SOLUTION

Accepted Solutions
Darshil_Shah1
Level 10 - Community Advisor + Adobe Champion

Re: Oauth Client Secret Rotation

Well, Marketo has an identity endpoint to create the short-lived (60-minute) OAUTH bearer access token, however, the Client ID and Client Secret that are required to create this access token need to be added manually, and there's no API for it. You'd need to update this in your properties file (or the place where you have these hard-coded and referenced everywhere from it). Upon switching the Client ID and Client Secret with valid values, you should not see any downtime/issues with creating the access token, so your integration should not get impacted.

View solution in original post

1 REPLY 1
Darshil_Shah1
Level 10 - Community Advisor + Adobe Champion

Re: Oauth Client Secret Rotation

Well, Marketo has an identity endpoint to create the short-lived (60-minute) OAUTH bearer access token, however, the Client ID and Client Secret that are required to create this access token need to be added manually, and there's no API for it. You'd need to update this in your properties file (or the place where you have these hard-coded and referenced everywhere from it). Upon switching the Client ID and Client Secret with valid values, you should not see any downtime/issues with creating the access token, so your integration should not get impacted.