> ## Documentation Index > Fetch the complete documentation index at: https://docs.stackone.com/llms.txt > Use this file to discover all available pages before exploring further. # Pardot OAuth 2.0 connector profile – StackOne setup guide > Set up the OAuth 2.0 connector profile for Pardot in StackOne. One-time admin setup required before your users can link Pardot accounts via Hub. Requires Salesforce admin access to create a Connected App with API and Pardot enabled.
Select Actions to adjust the guide
Some actions may require additional configuration in the provider to be accessible. Choose the actions you need and the guide will be updated.
Action
Scope(s)
Loading actions...
Dynamic Guide URL
Scopes Selected

          

            
Separator

Sign in to Salesforce

Sign in to the Salesforce org that owns your Pardot business unit. Use [`login.salesforce.com`](https://login.salesforce.com) for Production and Developer orgs, or [`test.salesforce.com`](https://test.salesforce.com) for a Salesforce Sandbox.

  • Navigate to Setup > Apps > App Manager.

Create a Connected App

Register a new Salesforce Connected App that StackOne will use to authenticate with Pardot.

Click New Connected App in the top-right corner of the App Manager page.

Complete the Basic Information section of the new Connected App.

  • Connected App Name: `StackOne Pardot Integration`
  • API Name: auto-filled from the Connected App Name
  • Contact Email: your email address

In the API (Enable OAuth Settings) section, enable OAuth and configure the callback URL.

  • Check Enable OAuth Settings.
  • Callback URL: `https://api.stackone.com/connect/oauth2/pardot/callback`
Enables actions: Add Prospect To List, Add Tag To Campaign, Add Tag To Dynamic Content, Add Tag To File, Add Tag To Landing Page, Add Tag To Prospect, Add Tag To User, Connect Salesforce Campaign, Create Custom Field, Create Custom Redirect, Create Dynamic Content, Create Form, Create Landing Page, Create List, Create Prospect, Create Tag, Delete Custom Field, Delete Custom Redirect, Delete File, Delete Form, Delete List, Delete Prospect, Delete Tag, Download Engagement Program Structure, Get Account, Get Campaign, Get Custom Field, Get Custom Redirect, Get Dynamic Content, Get Email Template, Get Engagement Program, Get File, Get Folder, Get Folder Contents Record, Get Form, Get Landing Page, Get List, Get List Email, Get List Email Stats, Get List Membership, Get One-to-One Email, Get Opportunity, Get Prospect, Get Tag, Get Tagged Object, Get User, Get Visitor Activity, List Campaigns, List Custom Fields, List Custom Redirects, List Dynamic Content, List Email Templates, List Engagement Programs, List Files, List Folder Contents, List Folders, List Forms, List Landing Pages, List List Emails, List List Memberships, List Lists, List One-to-One Emails, List Opportunities, List Prospects, List Tagged Objects, List Tags, List Users, List Visitor Activities, Merge Tags, Remove Prospect From List, Remove Tag From Campaign, Remove Tag From Dynamic Content, Remove Tag From File, Remove Tag From Landing Page, Remove Tag From Prospect, Remove Tag From User, Send List Email, Send One-to-One Email, Undelete Prospect, Update Custom Field, Update Custom Redirect, Update File, Update List, Update List Membership, Update Prospect, Update Tag, Upload File, Upsert Prospect By Email

Move the scopes required for your use case from Available OAuth Scopes to Selected OAuth Scopes.

Click Save to create the Connected App. It can take 2-10 minutes for the OAuth settings to propagate.

Configure the Refresh Token Policy

Open the Connected App's policies and set how long refresh tokens remain valid. Without this, refresh tokens may expire and break the connection.

From App Manager, find your Connected App, click the dropdown arrow, and select Manage. Then click Edit Policies.

In the App Authorization section, pick one of the following under Refresh Token Policy:

  • Refresh token is valid until revoked — recommended. The refresh token stays valid until a Salesforce admin revokes it, keeping the StackOne connection live indefinitely.
  • Expire refresh token after specific time — set Refresh Token Validity Period (maximum `720`) and Refresh Token Validity Unit (`Day(s)`, `Hour(s)`, `Minute(s)`). Choose the longest period your use case can tolerate — once it elapses, the end user must re-authenticate.

Click Save. Policy changes apply to new authorizations; existing sessions keep their original token lifetime until revoked or refreshed.

Retrieve the Client ID and Client Secret

Locate the Consumer Key and Consumer Secret for the Connected App you just created.

  • From App Manager, find your Connected App, click the dropdown arrow, and select View.
  • In the API (Enable OAuth Settings) section, click Manage Consumer Details.
  • Copy the Consumer Key (Client ID) and Consumer Secret (Client Secret), and store securely for use later.
## Creating the StackOne Connector Profile To create the Connector Profile in StackOne for Pardot: Login to StackOne and navigate to [Connector Profiles](https://app.stackone.com/connector_profiles)
  • Click + Connector Profile
  • Search for and select Pardot
  • Select Type as OAuth 2.0
  • Fill out the fields using details retrieved from your provider:
    • Client ID (Consumer Key)
    • Client Secret (Consumer Secret)
    • OAuth Scopes (Optional)
  • (Optional) Select Actions to be enabled for this Connector Profile
  • Click Create profile
 Congratulations! The new Connector Profile will now show up in your project ready to be used. You can now continue to Link Accounts for Pardot.