Salesforce is automatically updating Pardot for security reasons on August 12.
I will refer to Pardot in this blog with its new name: Marketing Cloud Account Engagement (MCAE).
Am I affected?
Go to Pardot Settings > Domain Management.
Click on the upper right button called “Content Served Using Default Domain.” This report will list any content (forms, form handlers, images etc.) or other content that’s accessed over the default go.pardot.com domain. (It shows where you may have potential problems.)
If the report displays “No results,” you should be in the clear.
NOTE: This report adds a row only when affected content is accessed. If you have forms that are not used frequently, they may still have issues.
Content Served Using Default Domain Report
If your results look like the report below, you have work to do.
Salesforce added this report to help you identify what needs to be updated. This report will add a row each time content (form, form handler, images etc.) is accessed with go.pardot.com. It shows forms accessed after March 14, 2022, and other content accessed after March 29, 2022.
If a content record is accessed multiple times, the report will only display the most recent access. Filter on TYPE to quickly find forms.
Export the information if you find that more convenient.
More details about the report.
A Note from Salesforce:
The biggest culprit is forms that are iframed. However, standalone forms are also impacted. “Standalone” means the form is viewed directly via the form’s link.
- Forms viewed via iframe are impacted
- Forms viewed standalone are impacted
- Landing pages via iframe are impacted
- Forms via a Pardot landing page are NOT impacted
- Form handlers are NOT impacted
- Images are NOT impacted
- Files are NOT impacted
“NOT impacted” means those assets will function fine after the April 22 update, but those assets are using the default domain (go.pardot.com), and Salesforce recommends updating to a custom domain when time allows.
Use the report to identify marketing assets that need to be updated and follow BOTH steps below.
- Add a custom tracker domain. Once added, your content is immediately available using the new domain. You don’t need to select the domain on form or content records.
- Work with your website team to update links and web pages to use the new content URLs. Replace “go.pardot.com” with your custom domain on:
a. External web pages that embed forms or content via iframe
b. External hyperlinks pointing to standalone forms
EXAMPLE: To update an iframed form, modify the src attribute on the iframe from a URL. In the example below, the first link (A.) should be updated as shown in the second link (B.)
The deadline for updates is April 22.
What if I miss the deadline?
The new deadline is August 12, 2022.
How do I know if my updates work?
You should no longer see new rows added from forms or other content on the “Content Served Using Default Domain” report.
Test the form then check the “Content Served Using Default Domain” report to make sure that no new items are added.
I highly recommend reading these resources for more details. I primarily used them to summarize main points for this blog.
New Limitations on Pardot Content and Default Domain
Pardot Default Domain Changes: Details and FAQs
Understanding the Content Served using Default Domain Report
Explainer video by Triana Jarman from Modern (LinkedIn)