SYSTEM UPDATE: Check your Account Engagement (Pardot) Settings

Salesforce is automatically updating Account Engagement for security reasons. Read more about the details and what you need to do.

I will refer to Account Engagement in this blog with its new name: Marketing Cloud Account Engagement (MCAE).

Am I affected?

Go to Account Engagement Settings > Domain Management.

Click on the upper right button called “Content Served Using Default Domain.” This report will list any content (forms, form handlers, images etc.) or other content that’s accessed over the default go.pardot.com domain. (It shows where you may have potential problems.)

If the report displays “No results,” you should be in the clear.

NOTE: This report adds a row only when affected content is accessed. If you have forms that are not used frequently, they may still have issues.

Content Served Using Default Domain Report

If your results look like the report below, you have work to do.

If you embed Account Engagement forms or other content in iframes, include JavaScript in that content, and serve this content over the default go.pardot.com domain, you need to make updates. Companies can CHOOSE to enable the security update. It will be automatically enabled on August 12.

Salesforce added this report to help you identify what needs to be updated. This report will add a row each time content (form, form handler, images etc.) is accessed with go.pardot.com. It shows forms accessed after March 14, 2022, and other content accessed after March 29, 2022.

If a content record is accessed multiple times, the report will only display the most recent access. Filter on TYPE to quickly find forms.

Export the information if you find that more convenient.

More details about the report.

A Note from Salesforce:

The biggest culprit is forms that are iframed. However, standalone forms are also impacted. “Standalone” means the form is viewed directly via the form’s link.

In summary:

Forms viewed via iframe are impacted
Forms viewed standalone are impacted
Landing pages via iframe are impacted
Forms via a Account Engagement landing page are NOT impacted
Form handlers are NOT impacted
Images are NOT impacted
Files are NOT impacted

“NOT impacted” means those assets will function fine after the April 22 update, but those assets are using the default domain (go.pardot.com), and Salesforce recommends updating to a custom domain when time allows.

Now what?

Use the report to identify marketing assets that need to be updated and follow BOTH steps below.

Add a custom tracker domain. Once added, your content is immediately available using the new domain. You don’t need to select the domain on form or content records.
Work with your website team to update links and web pages to use the new content URLs. Replace “go.pardot.com” with your custom domain on:
a. External web pages that embed forms or content via iframe
b. External hyperlinks pointing to standalone forms

EXAMPLE: To update an iframed form, modify the src attribute on the iframe from a URL. In the example below, the first link (A.) should be updated as shown in the second link (B.)

A. https://go.pardot.com/l/123456/2022-01-01/89xyz

B. https://www.mycustomdomain.com/l/123456/2022-01-01/89xyz.

The deadline for updates is April 22.

Source: Salesforce

What if I miss the deadline?

The new deadline is August 12, 2022.

If you don’t make the necessary changes, your marketing assets, such as forms, may not work as intended. The form content continues to be accessible; however certain included javascript will no longer function as expected.