Deprecation of SOAP API and Access Token in Query Parameter for REST API | Community
Skip to main content
Kenny_Elkington
Kenny_Elkington
New Participant
January 6, 2025

Deprecation of SOAP API and Access Token in Query Parameter for REST API

  • January 6, 2025
  • 6 replies
  • 5223 views

Two upcoming deprecations may impact your integration with Marketo Engage and may require action. 

 

The Marketo Engage SOAP API will be fully deprecated on January 31st 2026.  Please review if you are still using the SOAP API in one or more of your Marketo subscriptions. To avoid disruptions of service, you will need to retire or migrate any services using the SOAP API to the Marketo Engage REST API by January 31st 2026.  Consult the Migration Guide for further information.  Marketo Engage Support is only able to provide the IP address of requests made to the SOAP API.

 

On January 31st 2026, the Marketo Engage REST API will no longer accept access tokens for authentication and authorization via the ‘access_token’ query parameter.  Please check if one or more of your integrations uses this parameter to authenticate.  To avoid disruptions of service, any services using this parameter to authenticate will need to migrate to using header-based authentication using the ‘Authorization’ header, which is documented here. 

 

Please let us know in the comments section if you have any questions or concerns about this upcoming change.

    6 replies

    SanfordWhiteman
    SanfordWhiteman
    New Participant
    July 8, 2025
    Is there an easy way to determine which services are currently using the SOAP API? I am not clear on that from the articles shared on how to find that. Thanks!!

    Don’t think so. You could change the encryption key and see what breaks!

     

    Nobody with a well-kept-up integration would be using SOAP, which means the culprit is either an old internal app or a old-fashioned external app. But that still doesn’t pin it down.T

     

    The only other thing support could give you — possibly? — is the source IP. You could do a reverse lookup on it, might help.

      NiharikaGoyal
      NiharikaGoyal
      New Participant
      July 8, 2025

      Thanks for sharing this @kenny_elkington 

      nmillar
      nmillar
      New Participant
      July 7, 2025

      Is there an easy way to determine which services are currently using the SOAP API? I am not clear on that from the articles shared on how to find that. Thanks!!

      Ruchi_Lapran1
      Ruchi_Lapran1
      New Participant
      January 10, 2025

      Thanks for sharing @kenny_elkington 

      Miray
      Miray
      New Participant
      January 9, 2025

      Thank you @kenny_elkington This is very useful. 

      Jo_Pitts1
      Jo_Pitts1
      Community Manager
      January 8, 2025

      @kenny_elkington, super useful post.  Maybe edit it so it doesn't refer to the statements about having used SOAP in the last 30 days, of having used a URL based based access token :).. Those references are clearly designed for messaging direct to an instance user, not for a blog post 🙂

        Terms & ConditionsAccessibility statement

        Loading footer...