Type at least 2 characters.

AI generatedAI generated This record is generated by AI from the cited source. How AI is used

SE

Guidance to prepare for client secret rotation

Announced since Jan 2026 under review

Salesforce announced that from March 23, 2026 API client secrets expire 180 days after they are generated, and that secrets generated before that date expire on September 30, 2026.

Read vendor source (opens in a new tab)
help.salesforce.com Evidence for Announced · Jan 2026
Platform
Salesforce Marketing Cloud Engagement
Capability
Administration & access control · Platform
Vendor's name
Prepare to Rotate Client Secrets for Installed Packages · Improve Security for Client Secrets
First recorded
Record last updated

Record dates describe acquisition and updates, not human review. About corrections.

Lifecycle history 1 state

  1. AnnouncedJan 2026 Expected 23 Mar 2026
    First recorded 29 Sep 2026 · recorded from the source history · vendor release notes · help.salesforce.com ↗

Record corrections 2

Changes made to this record after it was published, separate from the vendor's lifecycle states above. All corrections.

  1. Text
    Summary rewritten

    Before: Advises admins to prepare to rotate API client secrets for installed packages ahead of upcoming changes.

    After: Salesforce announced that from March 23, 2026 API client secrets expire 180 days after they are generated, and that secrets generated before that date expire on September 30, 2026.

    Summary states the dates given by the vendor. Evidence: help.salesforce.com ↗

  2. Promised date

    Promised date: none → 23 Mar 2026

    The Spring '26 note says "Beginning March 23, 2026, all client secrets for API integrations have a 180-day expiration period". Evidence: help.salesforce.com ↗

Something wrong or out of date in this record? , ideally with a link to better evidence. How corrections work

Administration & access control on other platforms latest first

All Administration & access control changes →

More from SFMC Engagement in Administration & access control

Report an issue

Tell us what is wrong in this record. Reports are checked against public sources, with the same rules as every entry. How corrections work

Sent through Web3Forms. Nothing you send is published. How reports are handled.