Extract soap api credentials for webhook use | Community
Skip to main content
June 10, 2013
Investigating

Extract soap api credentials for webhook use

  • June 10, 2013
  • 17 replies
  • 3753 views
Hi, I am using an integration which sends request to my application with webhhok and syncs the result using SOAP API.
Different Marketo users can use it so i need to know when calling the soap api to which user to send the data in soap api.
I need to know the encryption key, user id and end point.
What is the best way to do this?
Should i send these parameters in the webhook Payload Template or does any one have an idea of a better way to do this?
Also, is there a way to extract these parameters dynamically using the the token feature?

Thanks,

17 replies

June 19, 2013
Just to confirm what you told in the thread is we can get marketo user id as part of the webhook request.
Are we getting this in june 21st release
June 11, 2013
No - you just need a mapping between user and end-point.  We will have tokens to send the soap user id and encryption key.  If it turns out that there are way too many users, we will introduce a system token to send the SOAP endpoint URL as well.  HTH,
Raj
June 11, 2013
So just to understand, you are saying that i need to save on my application the information from all the users on which endPoint, user and encryption key they need for the SOAP Api. and this way, when i get a request from Marketo,
according to the user that sent it i will know which end point, user and encryption key to use for the SOAP call?

thanks
June 10, 2013
We will be introducing system tokens for soap user id and soap key in the upcoming June release.  Perhaps, you can maintain a lookup table on your end to figure out which endpoint each user belongs to.

June release date is June 21
June 10, 2013
The SOAP endpoint is unique to the entire instance regardless the number of users.
 
The only circumstance you will have mutiple endpoints is managing multiple instances of Marketo.
 
Hard coding in the webhook's payload template is unsafe. Applications may expose it in URL along the way. 

Would mind to clarify exactly what you are trying to implement? Describing the process and application involved would be helpful to undesrtand the context.

 
June 10, 2013
Ok. So what is the best way to send different responses to different users using SOAP?
Each user has different end point url and diffenert user and different encryption key.
The only way is to send these hard coded in the webhook's payload template?
June 10, 2013
To the best of my knowledge there is no method to retrieve SOAP API's encryption key, user id and end point.

That would raise serious security risks, namely giving non-administrative users access to SOAP credentials through tokens, to highlight one risk among many others. Most applications - not just Marketo - would avoid that.