We haven an upcoming customer summit. The list is a very specific group of Senior level people and VIPs. My execs are adamant that the people on our invite list are the only ones who should be able to register. They are worried that the URL will be forwarded within our customer companies and that people who are not on our list will register. We don't want an awkward situation where we are turning people down, who are customers but were not on our list.
What is the best way to ensure that the form is only displayed / works for the people on our list?
I'm not sure the best way to begin thinking about how to set up our landing page and form to ensure only those who get the email to register are the ones who can do so.
Any help or ideas are greatly appreciated.
Thank you,
Spencer
If the URL includes the self-identifying mkt_tok (as is the default for emailed links) and you're using Pre-Fill on the form, then you could lock down and gray out the form input. A non-malicious user will see they're about to submit as "Jill Executive" and will not be able to change the form fields to reflect their own identity. (You should of course also note exactly what you're doing, i.e. this event is by invitation only, etc.) This is only casual, good faith protection: it will not prevent a malicious user from hitting view-source and hacking around the restriction. But it will mean that nobody can accidentally sign up who wasn't on the list.
An example of such a form is here, just takes a couple lines of JS:
Here's a live demo: MktoFoms2 :: Read-Only Form
Now, if you need to offer the signup form to people who don't receive the mkt_tok-enized link, i.e. to direct traffic, then you're going to need something more robust, namely a Lookup Form that first sees if they have certain characteristics, and only then shows them the summit registration form. I've posted in the past about how to use a Marketo form as a lookup form.