It’s time to stop ignoring the increasingly urgent messages in your Pardot org about Salesforce SSO being required after Feb 15th and do something about it.
February 15th is a Monday, by the way, so the last day to enact this change isn’t a very good day to run to your Salesforce admin with a bunch of urgent changes.
The documentation for the changes you have to make are here and here. I thought I’d point out a few why’s and wherefores that I’ve seen come up that the documentation doesn’t completely address.
What Does this Mean in Practice?
First, it means that when you login at pi.pardot.com you in effect MUST use the login with Salesforce button. It’s unclear what will become of the Pardot login fields on this page after the 15th, I imagine they will go away and you will only be able to use the salesforce login button.
So in effect this means ALL Pardot users must have Salesforce login credentials after the 15th of February, 2021. No more “Pardot-only” users.
How can I tell how many Pardot only users I have?
In the User section of Pardot, under “view”, select “Pardot-only users” and see how many you have.
If you don’t have any, you’re in good shape, you just have to enable SSO and you’re pretty much good to go. If you have Pardot-only users, you must give them a way to log in with Salesforce credentials.
Can I have SSO enabled but still have Pardot-only users?
I believe the answer here is yes. So it’s best to check.
But I don’t have enough Salesforce Licenses!
That’s ok. Pardot has supplied you with 100 “identity licenses” to issue to Pardot-only users. These are special Salesforce licenses that essentially will allow the user to login to to pi.pardot.com but have no other salesforce permissions.
Will an identity license allow access to the Pardot Lightning App?
No, it does not. Salesforce is working toward a future where Pardot becomes more and more on-platform and full utilization will require some form of Salesforce license. We are already partway there, as connected campaigns requires you to create and manage campaigns in Salesforce exlusively.
How do I Control Pardot Role Access with Identity Licenses?
The identity license has a standard Salesforce profile it’s matched with called Identity User. I recommend cloning this profile into at least 2 identity licenses specifically for Pardot role sync– call one Pardot Indentity Admin and the other Pardot Identity Marketing. This way you can match the approrpriate Pardot Role permissions with and equivalent profile. If you have custom roles with Pardot-only users assigned to those, you’ll need to create more profiles.
What if I’m on connector Version 1?
What connector you are on is in your Pardot account. The documenation recommends you upgrade to V2 first, and while not strictly necessary, I also recommend it, especially if you aren’t using marketing data sharing and business units. It’s relatively painless and only takes about 15 minutes, I covered this in a prior blog post. You can do this as a Pardot admin with no help from a Salesforce Admin, but I recommend doing this first and plenty early, as thare have been instances where it hangs up on reconnecting, and you don’t want to be submitting THAT ticket to Pardot support on the 15th. The only caveat here is if you had any special processes running in Salesforce based on your Pardot connector user, changing to the special B2BMA connector user (recommended), these processes will break. So it’s a good idea to check with your Admin to make sure that noting is watching the Pardot connector user and taking actions in Salesforce when the Pardot user does something.
What if I use a custom URL for Salesforce login?
Some users have noted that logging in to Pardot with Salesforce if you have a custom URL requries extra steps from pi.pardot.com if you have a custom URL. This might seem to be the case, but if your Salesforce admin has your org enabled to continue logging in from login.salesforce.com, then you don’t actually have to put in the custom URL. You can just log in with your salesforce credentials without putting in the custom URL.
In Salesforce setup this is under My Domain Settings. Uncheck the box from Login Policy (if it is, in fact, checked).
What about services like Zapier, OptinMonster, WordPress Plugin and others that use the Pardot Login system for authentication?
This one is gonna be the huge gotcha for many people who aren’t thinking about all the extra things in your stack and how they connect to Pardot. Anything that used the old Pardot system to authenticate (basically you logged in with your Pardot credentials and used the API keys from your Pardot account)– anything that connected in that way WILL BREAK AFTER FEB 15! Many vendors have made the necessary adjustments already, but you still have to go into every single system and re-connect using a different way. My recommedation is inventory every third party system you have that “talks” to Pardot and go through each one systematically and check the connections as soon as possible. Most likely you will need to reconnect using a different method if they have updated their tools. If they don’t offer a way to connect using Salesforce login credentials by now, you will need to check their knowledgebase for a statu update or send a strongly worded letter to their development team to get their act together, since this has been a well-known change coming for quite a long time. And while we’re on this subject, this would be a good opportunity to use those identity licenses to create a login user specific to each one of your external services you’re connecting to. This helps considerably with debugging when third party services go awry. There’s a great blog post on this topic outlined here: https://marcloudconsulting.com/sf-basics/salesforce-sso-apis
Should I transition to managing Pardot users in Salesforce?
This isn’t required before the 15th, but you might want to consider it since you’re doing all this work. There are some considerations there, which will be the topic of another post.
If you’ve gotten this far, congratulations!
What’s your excuse for not getting started on this right away? Don’t procrastinate on this one, I have a feeling Salesforce support is going to be backed up with tickets when this goes live, so don’t leave it until the last minute.
This Pardot article written by:Â Bill Fetter
Unfettered Marketing
A collection of random thoughts on how people, places and things in our fascinating world connect to sales and marketing, and what we can learn from it.
Original Pardot Article: https://www.unfetteredmarketing.com/post/pardot-authentication-retirement-faq
Find more great Pardot articles at https://www.unfetteredmarketing.com/blog
Pardot Experts Blog
We have categorized all the different Pardot articles by topics.
Pardot Topic Categories
- Account Based Marketing (ABM) (7)
- Business Units (14)
- ChatGPT / AI (3)
- Completion Actions (5)
- Connectors (10)
- Custom Redirects (4)
- Data Cloud (2)
- Demand Generation (8)
- Dynamic Content (6)
- Einstein Features (12)
- Email Delivery (17)
- Email Open Rates (3)
- Pardot A/B Testing (2)
- Email Mailability (16)
- Do Not Email (1)
- Double Opt-in (2)
- Opt Out / Unsubscribe (14)
- Email Preferences Page (6)
- Engagement Studio (16)
- Industries (1)
- Non Profit (1)
- Landing Pages (9)
- Lead Generation (1)
- Lead Management (13)
- Lead Routing (3)
- Lead Scoring (16)
- Leads (3)
- Marketing Analytics – B2BMA (9)
- Marketing Automation (1)
- Marketing Cloud (3)
- Marketing Cloud Account Engagement (4)
- Marketing Cloud Growth (2)
- New Pardot Features (6)
- Opportunities (2)
- Optimization (2)
- Pardot Admin (64)
- Duplicates (1)
- Marketing Ops (1)
- Pardot Alerts (1)
- Pardot API (2)
- Pardot Automations (3)
- Pardot Careers (12)
- Pardot Certifications (4)
- Pardot Consulting (1)
- Pardot Cookies (3)
- Pardot Custom Objects (3)
- Pardot Email Builder (8)
- Pardot Email Templates (9)
- HML (6)
- Pardot Events (16)
- Pardot External Actions (1)
- Pardot External Activities (4)
- Pardot Forms (29)
- Form Handlers (8)
- Pardot Integrations (20)
- Data Cloud (1)
- Slack (1)
- Pardot Lead Grading (5)
- Pardot Lead Source (2)
- Pardot Lightning (1)
- Pardot Migration (1)
- Pardot Nurture / Drip Campaigns (1)
- Pardot Personalization (3)
- Pardot Profiles (1)
- Pardot Releases (18)
- Pardot Sandboxes (2)
- Pardot Segmentation (5)
- Pardot Strategy (7)
- Pardot Sync (2)
- Pardot Sync Errors (1)
- Pardot Tracker Domains (5)
- Pardot Training (3)
- Pardot Vs Other MAPs (4)
- Pardot Website Tracking (2)
- Reporting (22)
- Salesforce and Pardot (31)
- Marketing Data Sharing (2)
- Pardot Users (3)
- Salesforce Automation (5)
- Salesforce Flows (2)
- Salesforce Campaigns (20)
- Salesforce CRM (3)
- Record Types (1)
- Salesforce Engage (3)
- Salesforce Queues (2)
- Security and Privacy (1)
- Tags (3)
- The Authors (504)
- Cheshire Impact (9)
- Greenkey Digital (51)
- Invado Solutions (37)
- Jenna Molby (9)
- Marcloud Consulting (6)
- Nebula Consulting (60)
- Pardot Geeks (44)
- Salesforce Ben | The Drip (235)
- SalesLabX (3)
- Slalom (4)
- Unfettered Marketing (46)
- Uncategorized (1)
- Website Tracking (2)
- Website Search (1)
More Pardot Articles
See all posts
This Pardot article written by:Â Bill Fetter
Unfettered Marketing
A collection of random thoughts on how people, places and things in our fascinating world connect to sales and marketing, and what we can learn from it.
Original Pardot Article: https://www.unfetteredmarketing.com/post/pardot-authentication-retirement-faq
Find more great Pardot articles at https://www.unfetteredmarketing.com/blog