Connect Salesforce Marketing Cloud Engagement
Connect Salesforce Marketing Cloud Engagement so Tapper Vantage learns which of your customers come back.
Marketing Cloud Engagement, formerly ExactTarget, is the Salesforce product online stores use for email, SMS and journeys. Connecting it lets Tapper read your subscribers, how they engage with your email and any orders you keep in Marketing Cloud, and tie each customer to your store's orders and the ad clicks behind them. Vantage uses this to tell a one-off buyer from a customer who comes back. To learn more about Vantage, see Tapper Vantage.
Tapper only reads. It never sends a message, changes a subscriber or edits a data extension in Marketing Cloud.
This page is for Marketing Cloud Engagement only. Tapper does not connect to Marketing Cloud Account Engagement, formerly Pardot, or to Marketing Cloud Next, sold as the Growth and Advanced editions. To connect the CRM that holds your leads and opportunities, see Connect Salesforce Sales Cloud.
Before you start
- In Marketing Cloud Engagement, you need the Marketing Cloud Administrator or the Administrator role. Both include Installed Package | Administer, which you need to create a package.
- In Tapper, you need the Owner or Admin role, with two-step sign-in, to connect, test, replace the secret or disconnect Marketing Cloud.
- Your store's orders must reach Tapper too, through the Commerce Cloud connection (Setup > Advanced > Commerce Cloud) or the Shopify app. Tapper ties a Marketing Cloud customer to the ad clicks behind their purchases through those orders.
Create an API integration for Tapper
Do this in Marketing Cloud Engagement, in the top-level business unit.
Open Installed Packages
Open Setup from the menu under your name, top right. Go to Platform Tools > Apps > Installed Packages, or type packages in Quick Find.
Create the package
Click New. Give the package a name, for example Tapper, and a description, then click Save.
Add an API integration
Under Components, click Add Component. Choose API Integration and click Next, then choose Server-to-Server and click Next. A server-to-server integration lets Tapper read on a schedule without anyone signed in.
Tick three Read boxes
Under Scope, tick Read for Data Extensions and Tracking Events in the Data group, and Read for List and Subscribers in the Contacts group. Leave every other box unticked, including every Write box. Click Save.
Salesforce also gives every installed package a few operations that no scope controls, such as running automations and sending transactional email. Tapper does not use them.
Copy the client secret
A Generate secret window shows the client secret once. Copy it to a password manager, then click Finish.
Copy the client ID and the address
In the API Integration section of the package, copy the Client Id and the Authentication Base URI.
Give access to each brand's business unit
If your account has more than one business unit, open the package's Access tab, turn on Enable Integration for every business unit Tapper should read, usually one per brand, then click Save.
Copy each business unit's MID
For each business unit you turned on, switch to it, click the account name at the top of Marketing Cloud and copy the number next to MID. Write down which brand it belongs to.
If your account restricts logins by IP address
Marketing Cloud can block sign-ins from IP addresses that are not on its allowlist, and Salesforce is making that blocking required for every account. If your account restricts logins by IP address, tell your Tapper contact before you connect, so you can agree the addresses to add.
To add an address, type allowlist in Quick Find in Setup and open Login IP Allowlist, in the top-level business unit. If Security Settings shows IP Allowlisting List Source as Defined at Business Unit level, do it in each business unit Tapper reads instead. Click Create, enter the address as both the beginning and the end of the range, set Login Source to API, then click Save.
Connect from Tapper
Open the CRM tab
In Tapper, open Setup > Advanced in the sidebar and select the CRM tab. If your workspace has more than one protected entity, first pick the one your store belongs to in the switcher under the workspace name.
Enter your values
In the Marketing Cloud card, below Salesforce and Mailchimp, enter the Client Id, the client secret, the Authentication Base URI and each business unit's MID with its brand name, then click Connect. Tapper stores the secret encrypted and never shows it again. Enter the secret here or share it through a password manager, never by email or chat.
Test the connection
Click Test connection. The test signs in to each business unit and reads one subscriber and the list of data extensions. If the secret is wrong, a Read box is missing or a business unit is not turned on, it says which. If you created or changed the package in the last 5 minutes, wait and test again: Marketing Cloud takes up to 5 minutes to apply package changes.
Choose what Tapper reads
Every business unit you turned on is read; you can switch one off. Under What Tapper reads, tick the data extensions that hold your customers and orders, and for each one pick the columns that hold the order number, the customer key or email, the order date, the total, the currency and the brand. Click Start reading. Tapper reads nothing until you do.
What Tapper reads
| Data | What |
|---|---|
| Subscribers | Subscriber key, email address, status, the dates they joined and unsubscribed, and locale. |
| Email engagement | Sends, opens, clicks, bounces and unsubscribes, as far back as Marketing Cloud keeps them: up to 730 days. |
| Data extensions you choose | Only the columns you picked: order number, customer key or email, order date, total, currency and brand. |
Email is hashed the moment it arrives, and so is a subscriber key that is an email address. The original address is never stored: not in our database, not in logs, not in our warehouse.
Tapper does not read or store names, phone numbers, postal addresses, free-text profile fields, email content, journeys, SMS or push data, or payment details.
How Tapper uses it
Tapper matches each subscriber to your store's orders by the hashed email, and by customer number where your order data extension has one. Orders that exist only in Marketing Cloud, such as older orders or orders from other channels, count as that customer's purchase history. Vantage then knows, for each customer, whether they are subscribed, how often they open and click your email, which of your brands they engage with and how much they have bought.
Keeping it in sync
Tapper first reads your history: every subscriber, your email engagement as far back as Marketing Cloud keeps it, and the data extensions you chose. After that it reads what changed once a night. If reading the history through the API would take too long, we will ask you to set up a scheduled Tracking Extract to your Marketing Cloud SFTP instead.
To change the data extensions Tapper reads, tick or untick them under What Tapper reads and save.
When the client secret expires
Marketing Cloud client secrets expire 180 days after they are generated. To replace one with no break in reading:
Generate a new secret
On the package's page in Marketing Cloud, under Staged Secret, click Generate. Copy the new secret, then click Finish.
Wait 5 minutes
A new secret starts working 5 minutes after you generate it.
Replace it in Tapper
On the CRM tab, type the new secret in the Marketing Cloud card, save, then click Test connection. Until you activate it, the old and the new secret both work.
Activate it
When the test passes, click Activate in Marketing Cloud. The old secret stops working at once.
Disconnecting
Disconnect on the CRM tab deletes the stored secret and stops reading. When one of your customers asks to be deleted, Tapper deletes their rows.
To end Tapper's access in Marketing Cloud too, open the package in Installed Packages and click Delete. Deleting a package removes it from every business unit.