Quick Start

Use this section to understand the prerequisites and steps for integrating with Data 360 APIs.

To quickly make calls to the Data 360 API, use the Postman collection. For more information and a video tutorial, see Make Data 360 REST API Calls with Postman.

Note

Step 1: Familiarize Yourself with Data 360

Explore the Data Cloud Online Help if you’re unfamiliar with the application.

Step 2: Set Up Data 360

Before you can use Data 360 APIs, you must configure the application. To set up the application, see Data Cloud Implementation Overview Guide.

Your org must be provisioned with a Data 360 license, and users must have the Minimum Access - API Only Integrations profile assigned and appropriate permissions to access required objects in Data 360. See Data Cloud Standard Permission Sets.

If you’re using an existing Data 360 instance, confirm with your admin that your user profile has permissions to use Data 360 APIs.

Step 3: Set Up Data Sources

After you create your Data 360 instance, you can control the scope of data ingestion and activation from within the instance.

Set up your data sources by creating an app connector in the Data 360 app. Configure data streams to ingest data for data mapping and segments.

Step 4: Set Up an External Client App

Set up an external client app to authenticate and request access to Data 360 APIs. The external client app enables standard OAuth protocols for authentication and authorization and is a newer version of a connected app. Follow the instructions in Create an External Client App and configure the app depending on the type of OAuth 2.0 flow you intend to use to authenticate to the Salesforce platform and how you want to implement it. For information on configuring an external client app for different OAuth 2.0 flows, see Configure the External Client App OAuth Settings.

In general, you must select Enable OAuth under OAuth Settings and then select the necessary OAuth scopes. These scopes define the permissions for the external client app and are granted as tokens after the app is authorized.

Perform ANSI SQL queries on Data Cloud data (cdp_query_api): The cdp_query_api scope allows ANSI SQL queries of Data Cloud data on behalf of the user.
Manage Data Cloud profile data (cdp_profile_api): The cdp_profile_api scope allows you to manage Data Cloud profile records.
Manage Data Cloud Ingestion API data (cdp_ingest_api): The cdp_ingest_api scope allows access to manage Data Cloud Ingestion API data.
Perform requests at any time (refresh_token): The refresh_token scope allows a refresh token to be returned when the requesting client is eligible to receive one. With a refresh token, the app can interact with the user’s data while the user is offline.
Manage user data via APIs (api): The api scope allows access to the current logged-in user’s account using APIs, such as REST API and Bulk API 2.0.

After creating the external client app, navigate to the Settings tab of the app, click Consumer Key and Secret under OAuth Settings, and copy the Consumer Key and Consumer Secret. You need to use these details to authenticate to Data 360 APIs.

Important

For example, you can configure the external client app to use the web server OAuth 2.0 flow to authenticate to the Salesforce platform. For more information, see Configure a Web Server Flow.

Step 5: Authenticate to the Data 360 API

Authentication to the Data 360 API is a two-step process. First, you must authenticate to the Salesforce platform to obtain a Salesforce access token. Then, you use that Salesforce access token to authenticate to the Data 360 tenant for a Data 360 access token. You can then use the Data 360 access token to make API calls to the Data 360 API.

Authenticate to the Salesforce Platform

To use the OAuth 2.0 web server flow to authenticate to the Salesforce platform, perform these settings in the external client app:

For simplicity, disable Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows in the external client app. Depending on the OAuth 2.0 flow type you intend to use, you must configure the required settings in the external client app. For more information, see Configure the External Client App OAuth Settings.
To authenticate to the Salesforce platform, you need a callback URL where Salesforce sends the authorization code after successful authentication. You can either set up a local server (like localhost:3000) for testing or use your actual client URL. You must use the same URL as the callback URL in your external client app.

To authenticate to the Salesforce platform:

Initiate authorization and retrieve the Salesforce authorization code.

a. Navigate to this URL in your web browser.
1https://MY_DOMAIN_NAME/services/oauth2/authorize?response_type=code&client_id={CONSUMER_KEY_OF_YOUR_EXTERNAL_CLIENT_APP}&redirect_uri=http://localhost:3000/callback&scope=api cdp_query_api cdp_profile_api cdp_ingest_api
In this section, the commands use placeholder variables written in uppercase letters with underscores separating the words.
Note

b. In the Salesforce login page, log in using your credentials. After successful login, a consent screen appears.

c. Click Allow to authorize access to Data Cloud APIs. You are redirected to the web page of the redirect URL specified in your request.

d. Copy the Salesforce OAuth code displayed on the web page to use it in the next step.

Exchange the OAuth code obtained in the previous step for the Salesforce access token.

Request

1curl -X POST "https://MY_DOMAIN_NAME/services/oauth2/token" \
2-H "Content-Type: application/x-www-form-urlencoded" \
3-d "grant_type=authorization_code" \
4-d "code=SALESFORCE_OAUTH_CODE" \
5-d "client_id=CONSUMER_KEY_OF_YOUR_EXTERNAL_CLIENT_APP" \
6-d "client_secret=CONSUMER_SECRET_OF_YOUR_EXTERNAL_CLIENT_APP" \
7-d "redirect_uri=http://localhost:3000/callback"

Response

1{
2  "access_token": "SALESFORCE_ACCESS_TOKEN",
3  "signature": "Y4glTxhJzt9phzmZJebo4xmvRHZ9uGNvZpq/oIVvkpw=",
4  "scope": "cdp_ingest_api api cdp_profile_api",
5  "instance_url": "https://orgfarm-1dc4e302d3.test1.my.pc-rnd.salesforce.com",
6  "id": "https://login.test1.pc-rnd.salesforce.com/id/00DSB00000VMDJJ2A5/005SB00000O3tYPYAZ",
7  "token_type": "Bearer",
8  "issued_at": "1748776670012"
9}

Copy the SALESFORCE_ACCESS_TOKEN to use it in the next step.

Authenticate to the Data 360 Tenant

Exchange the SALESFORCE_ACCESS_TOKEN for the Data Cloud access token.

Request

1curl -X POST \
2--url 'https://MY_DOMAIN_NAME/services/a360/token' \
3--header 'Content-Type: application/x-www-form-urlencoded' \
4--data 'grant_type=urn:salesforce:grant-type:external:cdp&subject_token=SALESFORCE_ACCESS_TOKEN&subject_token_type=urn:ietf:params:oauth:token-type:access_token&dataspace=Human_Resources'

Response

1{
2  "access_token": "DATA_CLOUD_ACCESS_TOKEN",
3  "instance_url": "DATA_CLOUD_INSTANCE_URL",
4  "token_type": "Bearer",
5  "issued_token_type": "urn:ietf:params:oauth:token-type:jwt",
6  "expires_in": 7060
7}

Copy these values from the response to use in the Data 360 API requests.

DATA_CLOUD_ACCESS_TOKEN: The token used to access Data Cloud resources.
DATA_CLOUD_INSTANCE_URL: The tenant-specific endpoint where Data 360 API requests are sent.

Step 6: Make a Sample API call

After you’ve acquired your org-specific Data 360 endpoint (DATA_CLOUD_INSTANCE_URL), use it for your organization’s Data 360 API calls.

Let’s make a sample API call to get the metadata of your Data 360 tenant.

Request

1curl -X GET \
2--location 'https://DATA_CLOUD_INSTANCE_URL/api/v1/metadata' \
3--header 'Authorization: Bearer DATA_CLOUD_ACCESS_TOKEN'