Sf Cloud Security

Front 1

Cloud Security Get to Know MCS (Multi Factor Authentication)

Back 1

Multi-factor authentication (MFA) enhances your Marketing Cloud login process by adding another layer of protection against common security threats, including phishing attacks, credential stuffing, and account takeovers. With MFA, a user must provide two factors to prove their identity—their username and password combination plus a supported verification method—before they can log in to their Marketing Cloud account. Even if a user’s credentials wind up compromised, the additional factor helps prevent unauthorized access.

Front 2

MCS Get to Know MCS (Security Settings)

Back 2

Security settings also restrict the apps and information users can access in Marketing Cloud. That’s where admins come in. Marketing Cloud admins can assign roles and permissions to individuals for more granular control of access and activities, so work with your Marketing Cloud admin to fine-tune these settings and secure your account.

Front 3

MCS Get to Know MCS (Two important passwords)

Back 3

Your account passwordThe FTP password for your Marketing Cloud account

Both of these passwords are used in many automations—the account password to gain access to Marketing Cloud and authorize activities, and the FTP password to import and export data files. Remember that the entire account uses a single FTP password, so you need to make sure all users and automations are updated when changes occur. It’s also a good idea to change these passwords regularly (no less than every 90 days) to keep your account secure. And not just any password will do. Create a strong, unique password with:

Front 4

MCS Getting to Know MCS (Login with SAML and SSO)

Back 4

Passwords help secure our software, but we know you don’t want another password to remember. That’s why Marketing Cloud allows third-party, single sign-on (SSO) authentication via SAML 2.0. You can use Salesforce federated authentication or another service, depending on your security needs. After you activate this feature (with the correct metadata), Marketing Cloud users can securely access all the resources they need with fewer passwords. Hooray! We talk more about SSO in the next unit, so stay tuned.

Front 5

MCS Get to Know MCS (Transparent Data Encryption)

Back 5

This solution helps you encrypt data without modifying any existing code and protects against a variety of scenarios, including stolen physical media. In other words, if someone gets their hands on the drive that contains your data, Transparent Data Encryption prevents them from decrypting and accessing the data

It’s important to note that Predictive Intelligence, Audience Builder, and Social Studio can’t use Transparent Data Encryption.

Front 6

MCS Get to Know MCS (Audit Trail)

Back 6

To enable data collection for audit logging in your account, select Enable Audit Trail Data Collection. This feature collects audit logging in two separate reports available after you enable this feature. Use this information to evaluate security-related and auditable events that occur in your account.

Audit Trail allows security admin users to view Marketing Cloud access and activity records. Receive Audit Trail records either through Marketing Cloud Automation Studio data extracts or through REST API extracts. Retrieve Audit Trail information periodically for use in your own internal system tools.

Front 7

MCS Manage Encryption Keys (Keys)

Back 7

Keys are values used to securely allow different functions in Marketing Cloud—such as encrypting and decrypting data, managing single sign-on, or generating JSON Web Token (JWT) values for custom Journey Builder activities.

Front 8

MCS Manage Encryption Keys (Where to Find the Keys)

Back 8

In Marketing Cloud, click Setup and expand the Data Management section to find the Key Management page. This page is where you create and manage your keys. You can create several different types of keys, depending on your needs. Let’s review.

Front 9

MCS Manage Your Encryption Keys (Asymmetric Key)

Back 9

keys require you to upload a certificate to create the key. These keys help you encrypt and decrypt data and digitally sign email messages.

Front 10

MCS Manage Your Encryption (Symmetric Key)

Back 10

keys require you to create a passphrase for use with the key. This key value requires 32 hexadecimal characters. These keys help you encrypt and decrypt data and digitally sign email messages.

Front 11

MCS Manage Encryption Keys (Initialization vector key)

Back 11

keys allow you to specify the 16-bit value yourself, or you can let Key Management create the values for you. Use this key to enable your field level encryption implementations.

Front 12

MCS Manage Encryption Keys (Salt)

Back 12

keys use a hex value longer than 8 bits. The encryption uses random bits with a password or passphrase to generate JWTs for custom Journey Builder activities.

Front 13

MCS Manage Encryption Keys (SSH Key)

Back 13

keys allow SFTP authentication and also require an uploaded certificate.

Front 14

MCS Manage Encryption Keys (SSO Metadata Key)

Back 14

keys allow you to integrate a single sign-on authentication for Marketing Cloud. You can only create this key if your account is enabled for SSO authentication.

Front 15

MCS Manage Encryption Keys (Encrypt Your Data)

Back 15

Encryption keys play a wide variety of roles in Marketing Cloud activities. For example, you can encrypt and decrypt data at send time, as shown in this AMPscript example.

You can also encrypt and decrypt data for file transfer activities in Automation Studio. Specify the key as part of the file transfer activity from the Marketing Cloud Safehouse location to an FTP Location.

Front 16

MCS Manage Encryption Keys (Encode Your JWTs)

Back 16

You can also use salt keys to encode JSON Web Token (JWT) information in a Journey Builder activity. The JWT validates the identity of API calls to your custom activities. Use a JWT for activities that are retrieving sensitive data or performing sensitive actions. In this example, the sample code uses a JWT value and a salt key for the execute, save, validate, and publish activities.

Front 17

MCS Manage Encryption Keys (Implement SSO for Your Marketing Cloud Account)

Back 17

Lastly, any single sign-on integration requires an SSO metadata key. The information for this key changes depending on the provider used to create your integration, but you need these values to complete the process.

SAML metadataFetch data from URL (generated automatically from your provider’s specified URL)Provider certificateEntity IDName ID FormatSingle Logout Service Location and Binding (determined by your provider)

Front 18

MCCM Contacts & Contact Model (

Back 18

Contact Builder is a Marketing Cloud app which lets you access, manage, organize, link, and view contact data from all Marketing Cloud applications and channels. Think of Contact Builder as an application for setting up a relational database with your contact data.

Front 19

Export Email AllowList

Back 19

Your export email allowlist contains individual email addresses or domains that can receive exports via email from your Marketing Cloud account. Enter these email addresses or domains as export email recipients in the Setup section. Once you create an export email allowlist, only users matching the allowlisted criteria can receive exported data.

Front 20

Modify Marketing Cloud Security Settings

Back 20

Modify security settings in Marketing Cloud Setup.

Front 21

Login IP Allowlist

Back 21

A Login IP Allowlist includes a range of IP addresses you define that indicates what IP addresses can access your account to prevent unauthorized IP addresses from logging into your account. Allowlisted IP addresses ranges can access the application.

Front 22

Identity Verification in Marketing Cloud

Back 22

The Identity Verification (IDV) security setting in Marketing Cloud requires you to authenticate the browser or app used to access the application. When you attempt to log in, the system sends an email with a verification code to the email address associated with your account. Enter the code in the Verification Code field to log in. Ensure that all users in your account use valid email addresses in their user profile.

Front 23

Enterprise and Agency Security Settings Inheritance

Back 23

Any new business unit created in an Enterprise or Enterprise 2.0 account inherits the security settings from the parent account. This inheritance also applies to child accounts created in an Agency account. All security settings continue to inherit from the parent account to the child account until you change any security setting on the child account. At that point, the inheritance ends and the child account no longer updates security settings based on changes at the parent level. You can’t reinstate the inheritance after a security change breaks it.

Front 24

Data Export Settings

Back 24

The Enforce Export Email Allowlist setting forces the application to export data to only those email addresses on the export email allowlist. This allowlist allows you to precisely determine the email addresses eligible to receive export data and notifications from your account.

Front 25

Marketing Cloud Setup

Back 25

Marketing Cloud Setup provides a centralized location to view and manage details about your Marketing Cloud account. Setup also contains links to other helpful sources of information about Marketing Cloud.

Front 26

Marketing Cloud Setup (Side Menu)

Back 26

This menu includes sections for Administration, Platform Tools, and Settings. Navigate through this menu to find the setup page you need.

Front 27

Marketing Cloud Setup (Quick Find)

Back 27

Enter a search term to filter the list of pages in Setup. This section provides a quicker way to find admin tools than browsing through the setup pages.

Front 28

Marketing Cloud Setup (Carousel)

Back 28

The Carousel contains links to these Marketing Cloud resources.Marketing Cloud system statusMarketing Cloud release notesTrailheadMarketing Cloud video tourMarketing Cloud information on Salesforce Developer

Front 29

Marketing Cloud Setup (Metrics)

Back 29

The Metrics section can contain these details for the Marketing Cloud account. The apps provisioned in your account and your user permissions determine the information that shows here.

Search Knowledge articles, best practices, and more...Marketing CloudSearchMarketing CloudMarketing Cloud GlossaryMarketing Cloud Tenant TypesMarketing Cloud SetupSetup AssistantPassword Management in Marketing CloudMarketing Cloud Account SettingsMarketing Cloud Feature SettingsMarketing Cloud Security SettingsMarketing Cloud RolesMarketing Cloud UsersBusiness Units in Marketing CloudAlert ManagerAssign a Role to a Marketing Cloud Business UnitMarketing Cloud FTP AccountsFile LocationsKey ManagementParameter ManagementTagsMarketing Cloud BrandBuilderSingle Sign-On Authentication Via SAML 2.0Account Login AccessSSL Certificates for Account BrandingDetermine Your Marketing Cloud InstanceGraded Browser SupportIP Addresses for Inclusion on Allowlists in Marketing CloudMarketing Cloud DashboardMarketing Cloud Data Protection and Privacy ToolsMarketing Cloud Data Usage TypesMarketing Cloud User PreferencesMarketing Cloud CalendarEvent Notification ServiceDeployment ManagerField-Level Encryption in Marketing CloudTokenized SendingData at Rest EncryptionExpired Marketing Cloud Account SubscriptionsSuspended Marketing Cloud Account SubscriptionsResults 1-100 of 343Marketing Cloud SetupMarketing Cloud Setup provides a centralized location to view and manage details about your Marketing Cloud account. Setup also contains links to other helpful sources of information about Marketing Cloud.Side MenuThis menu includes sections for Administration, Platform Tools, and Settings. Navigate through this menu to find the setup page you need.Quick FindEnter a search term to filter the list of pages in Setup. This section provides a quicker way to find admin tools than browsing through the setup pages.CarouselThe Carousel contains links to these Marketing Cloud resources.Marketing Cloud system statusMarketing Cloud release notesTrailheadMarketing Cloud video tourMarketing Cloud information on Salesforce DeveloperMetricsThe Metrics section can contain these details for the Marketing Cloud account. The apps provisioned in your account and your user permissions determine the information that shows here.Journeys - this graph shows the number and states of journeys in your account. Click View Details and view more details in Journey Builder.Automations - this graph shows the number and states of automations from the last seven days in your account. Click View Details and view more details in Automation Builder.Data Extensions - this number shows the total number of data extensions in your account. Click View Details and view more data extension information.Content - this number shows the total number of content pieces in your account, including a subtotal of shared assets. Click View Details and view more details in Content Builder.Users - this number shows the total number of users in your account. For business units, this number displays only the number of users assigned to that business unit. Click View Details and review all available users for the entire account.

Front 30

Salesforce Trailblazer Community

Back 30

This section includes a search bar for all Trailblazer Community resources. It also includes a link to Marketing Cloud documentation and a form to post questions to our Trailblazer community experts.

Setup Assistant

Password Management in Marketing Cloud

Marketing Cloud Account Settings

Marketing Cloud Feature Settings

Marketing Cloud Security Settings

Marketing Cloud Roles

Marketing Cloud Users

Business Units in Marketing Cloud

Alert Manager

Assign a Role to a Marketing Cloud Business Unit

Marketing Cloud FTP Accounts

File Locations

Key Management

Parameter Management

Tags

Marketing Cloud BrandBuilder

Single Sign-On Authentication Via SAML 2.0

Account Login Access

SSL Certificates for Account Branding

Front 31

Marketing Cloud Setup (Setup Assistant)

Back 31

Use the Setup Assistant to configure your new Marketing Cloud account. A prioritized task list guides you to make full use of Marketing Cloud. Access Setup Assistant in the Setup menu of your Marketing Cloud account.

Front 32

Marketing Cloud Setup (Password Management in Marketing Cloud)

Back 32

Reset lost or forgotten Marketing Cloud passwords with password management. This automated process provides the ability to regain access after completing the necessary steps and ensure the security of the information within the account.

Front 33

Marketing Cloud Setup (Marketing Cloud Account Settings)

Back 33

Account administrators can control configuration information on the Account Settings workspace. This workspace contains key information regarding your account and allows you to modify that information for you and your users. Follow these steps to access the Account Settings workspace.

Front 34

Marketing Cloud Setup (Marketing Cloud Feature Settings)

Back 34

Review and configure settings for Marketing Cloud features.

Front 35

Marketing Cloud Setup (Marketing Cloud Security Settings)

Back 35

Marketing Cloud Security Settings include parameters for session timeout, username and password conventions, and lockout logic. These features help improve the overall security of your account.

Front 36

Marketing Cloud Setup (Marketing Cloud Roles)

Back 36

Marketing Cloud roles allow you to grant your users access to the areas and features that pertain to their job functions.

Front 37

Marketing Cloud Setup (Marketing Cloud Roles)

Back 37

Marketing Cloud roles allow you to grant your users access to the areas and features that pertain to their job functions.

Front 38

Marketing Cloud Setup (Marketing Cloud Users)

Back 38

A user record in the application grants access to a person who uses Marketing Cloud. As an account administrator, use the administrative area of the application to ensure that all users are properly configured.

Front 39

Marketing Cloud Setup (Business Units in Marketing Cloud)

Back 39

Business units allow you to control access to information and sharing of information. Use the hierarchical structure of business units to control your brand while enabling access to messaging technologies to your users. Manage user roles for the business unit, view users who have access to the business unit, and define filter criteria for subscribers. Business units are available in Enterprise and Enterprise 2.0 accounts.

Front 40

Marketing Cloud Setup (Alert Manager)

Back 40

Alert Manager lets Marketing Cloud administrators select a users’ email address to receive critical system alerts for email batch sends and email triggered sends. When sends from Email Studio, Automation Studio, or Journey Builder stop due to a system error or subscriber limit, we email the recipient a notification and the reason for the error.

Front 41

Marketing Cloud Setup (Assign a Role to a Marketing Cloud Business Unit)

Back 41

Grant business units access to features in Marketing Cloud. This role is applied to all users in the business unit. The user's permissions are evaluated using this role and any other roles assigned directly to the user. Any explicit Deny settings override any explicit Allow settings when the roles conflict.

Front 42

Marketing Cloud Setup (Marketing Cloud FTP Accounts)

Back 42

Use FTP accounts to assign FTP privileges to users in your Marketing Cloud account.

Front 43

Marketing Cloud Setup (File Locations)

Back 43

A file transfer location is an FTP site or other file storage location used to transfer files to or from your Marketing Cloud account. File transfer locations are maintained on the Admin tab of the application. You must have administrative permissions to access this screen.

Front 44

Marketing Cloud Setup (Key Management)

Back 44

Use this feature to manage security keys and other security options used to encrypt and decrypt data, digitally sign email messages, and implement SAML single-sign on for your Marketing Cloud account. This encryption applies only to information stored in the Marketing Cloud and not in other Salesforce offerings.

Front 45

Marketing Cloud Setup (Parameter Management)

Back 45

Set up or edit the tracking parameters that are appended to the links in messages sent from your Salesforce Marketing Cloud account. Parameters you configure here are applied to all messages sent from your business unit.

Front 46

Marketing Cloud Setup (Tags)

Back 46

In Marketing Cloud Setup, create and manage tags for use with Content Builder, Journey Builder, and Campaigns. Each tag includes a name and description for identification purposes. You can add tags from Setup and the Content Builder editor.

Front 47

Marketing Cloud Setup (Marketing Cloud BrandBuilder)

Back 47

Use Marketing Cloud BrandBuilder to customize the color scheme in your Marketing Cloud account. Based on the colors of the logo you upload, BrandBuilder provides several pre-designed color schemes. After you choose how to privately label your account, BrandBuilder applies the color scheme to Marketing Cloud to give your users a branded experience.

Front 48

Marketing Cloud Setup (Single Sign-On Authentication Via SAML 2.0)

Back 48

This feature enables a third-party identity provider to authenticate your users to both your internal systems and your Marketing Cloud application. Currently, you can enable a single SAML key per Marketing Cloud account.

Front 49

Marketing Cloud Setup (Account Login Access)

Back 49

The Account Login Access feature allows Marketing Cloud support to log in to your account as a user to set up certain features or troubleshoot problems.

Front 50

Marketing Cloud Setup (SSL Certificates for Account Branding)

Back 50

Use Secure Socket Layer (SSL) certificates to improve the security of your page-based interactions. Give your subscribers more confidence when clicking through links in your content and submitting any information on Marketing Cloud-hosted pages. These certificates add a layer of encryption to the transfer of sensitive or personal information. This encryption helps prevent external parties from accessing information sent to or from your contacts.

Front 51

Marketing Cloud Setup (Marketing Cloud Roles)

Back 51

Cloud Administrator

Cloud Viewer

Cloud Channel Manager

Cloud Security Administrator

Cloud Content Editor or Publisher

Front 52

Marketing Cloud Setup (Marketing Cloud Administrator Role)

Back 52

This role assigns Marketing Cloud roles to users and manages channels, apps, and tools. This role applies primarily to all Marketing Cloud functionality except Email Studio.

Front 53

Marketing Cloud Setup (Marketing Cloud Viewer Role)

Back 53

This role views cross-channel marketing activity that results in Marketing Cloud. This role is generally the most restrictive role and doesn't allow access to creation, sending, or reporting activities.

Front 54

Marketing Cloud Setup (Cloud Channel Manager Role)

Back 54

This role creates and executes cross-channel interactive marketing campaigns and administers specific channels. Specifically, the role permits a user to create, send, and monitor Marketing Cloud journeys and messages. Those permissions include reports.

Front 55

Marketing Cloud Setup (Cloud Security Administrator Role)

Back 55

This role maintains security settings and manages user activity and alerts. Assign this role to someone who determines user access and work with Marketing Cloud security.

Front 56

Marketing Cloud Setup (Cloud Content Editor/Publisher Role)

Back 56

This role creates and delivers messages through applicable channel apps. Specifically, the role permits a user to create and send Marketing Cloud journeys and messages. This role doesn't include access to many reports.

Front 57

Marketing Cloud Setup (Different Role section)

Back 57

Advertising Studio Roles

Audience Builder Roles

Automation Studio Roles

Cloudpages Roles

Content Builder Roles

Distributed Sending Roles

Permissions for Email Studio Roles

Journey Builder Roles

MobileConnect Roles

MobilePush Roles

Marketing Cloud Roles

Front 58

MC Setup Profile and Preference Attributes

Back 58

Email Studio uses profile and preference attributes to store information about subscribers.

Front 59

MC Setup Profile

Back 59

The profile attribute contains information to characterize a subscriber profile. For example, each subscriber is asked to provide their birth date, and email address. By default, every account has three profile attributes: Full Name, Email, and UserDefined, which is intended as a generic attribute that you can use as needed. By default, every account also receives an HTML Email preference attribute that is set to Yes. You can’t modify these attributes.

Front 60

MC Setup Preference Attribute

Back 60

A preference attribute characterizes how a subscriber prefers to receive email. These attributes are specified as yes or no choices to a declarative statement. For example: The subscriber prefers to receive email as HTML.