How to rotate Client Secret in DESelect

With the SFMC security key expiration updates, DESelect provides a streamlined credentials management portal to rotate your Client Secret quickly and without service interruption.

DESelect Admin Access: You must have a DESelect Segment or Engage Admin role to log in and perform key rotations. Any other roles cannot access the portal.

You can explore our step-by-step walkthrough video here.

Step 1: Access the Platform

1. Navigate to https://vault.deselect.com/ and enter your admin email address to receive a single-use sign-in link via email.
   
2. You will then receive an email mentioning the next steps.
   
3. Once you click on it, you will be redirected to the platform.
   

Step 2: Generate a Staged Secret in SFMC

1. Log in to SFMC and go to Setup > Apps > Installed Packages, then select your package (e.g., DESelect Segment, DESelect Engage or Server-to-Server/ DESelect Automations).
   
    

2. Under Staged Secret, click Generate.
   
   Important: Copy the generated Client Secret immediately and note its exact expiration date. This key is displayed only once. Do not activate the key yet.
    

Step 3: Update the Key in the DESelect Portal

1. In the DESelect portal, locate your package and click Rotate.
    
2. Paste the staged Client Secret into the portal.
   
3. Select the exact Expiry Date matches the expiration provided in SFMC.
4. Click Replace to save the updated credentials in DESelect.
   

Step 4: Activate the Secret in SFMC

1. Return to SFMC and click Activate next to the Staged Secret.
   
   The old secret will automatically deactivate, and DESelect will seamlessly switch to the newly activated secret with no downtime.

Once successfully rotated, DESelect will automatically email Admin users ahead of the next expiration date to ensure you stay ahead of future rotation deadlines.