Marketo Salesforce Integration: How the Native Sync Works and How to Set It Up

In this article
- Adobe Marketo Engage has a native Salesforce sync built in. It runs all day: sync, pause about 5 minutes, sync again. Leads, contacts and campaign membership sync both ways; accounts, opportunities, users, activities and custom objects come from Salesforce to Marketo only.
- Setup is three steps from Adobe’s guide: add Marketo fields (Score, Acquisition Program, Acquisition Date) to Salesforce, create a dedicated sync user with its own profile, then connect in Marketo Admin. Hide unneeded fields first: every field the sync user can see becomes a permanent Marketo field.
- Most problems come from too many visible fields and records (sync backlog), validation rules rejecting records, duplicates Marketo won’t merge on its own, and opportunities without contact roles. Marketo Admin has Sync Errors, Sync Status and backlog dashboards to watch them.
- Add Marketo Sales Insight if reps should see scores and activity inside Salesforce. Use an iPaaS or custom API work only for what the sync can’t do: writing to opportunities or accounts, several Salesforce orgs, or data from a third system.
Jump to
- Your options for a Marketo and Salesforce integration
- What the native sync does, object by object
- Requirements before you connect
- How to set up the Marketo Salesforce sync, step by step
- Field sync: what the docs say happens to your fields
- Lead lifecycle and the scoring handoff
- Marketo Sales Insight: marketing data inside Salesforce
- Salesforce API usage and the sync backlog
- Common problems and how to fix them
- When to customize beyond the native sync
- Go-live checklist
- Where Gilzor fits
Your options for a Marketo and Salesforce integration
Unlike most tool pairs, Marketo and Salesforce don’t need a marketplace connector: the sync is part of Marketo Engage. Your real choice is what to add on top of it. For Salesforce integrations in general, see our Salesforce integration guide.
| Option | What it covers | Direction | Cost level | Effort | Main limits |
|---|---|---|---|---|---|
| Native Marketo sync | Leads, contacts, accounts, opportunities, users, Salesforce campaigns, activities, custom objects | Two-way for leads, contacts and campaign membership; Salesforce to Marketo for the rest | Part of Marketo Engage | Days to a few weeks, mostly prep and cleanup | No writes to opportunities, accounts or custom objects; Salesforce credentials can’t be switched once the sync starts |
| Native sync plus Marketo Sales Insight | Adds a Marketo panel in Salesforce: Interesting Moments, web and email activity, scores, “send Marketo email” and “add to Marketo campaign” actions | Marketo data shown in Salesforce | Check whether your Marketo contract includes it | A day or two to install and configure layouts | A separate package to install and maintain |
| iPaaS (Workato, MuleSoft, Boomi and similar) | Flows the sync can’t do: Marketo data onto opportunities or accounts, a third system, several orgs | Any | Usually tens of thousands of dollars a year | Weeks, needs a recipe or flow builder | Pays off only across several integrations |
| Custom API integration | Anything both APIs expose, with your own rules, queues and logs | Any | Build cost plus maintenance | Weeks to a few months | You own the code; Marketo’s own API has daily and rate limits |
Four questions to find your setup:
Which Marketo Salesforce setup fits you?
What the native sync does, object by object
Adobe’s documentation describes a sync that runs all day: it completes a cycle, waits 5 minutes and starts again. Regular cycles take seconds or minutes because they carry only changes. The first sync copies your entire Salesforce database and can take hours or days. Only data the sync user can see in Salesforce comes across.
| Marketo | Salesforce | Direction | Usual system of record | Notes |
|---|---|---|---|---|
| Person | Lead | Two-way | Marketo for marketing fields, Salesforce for sales fields | Marketo’s SFDC Type field shows lead, contact or empty (not in Salesforce). Sync Person to SFDC creates the lead |
| Person | Contact | Two-way | Salesforce for sales fields | Converting a lead in Salesforce leaves one contact on both sides |
| Company | Account | Salesforce to Marketo | Salesforce | Account edits in Marketo don’t sync back and are overwritten on the next Salesforce update |
| Opportunity info | Opportunity | Salesforce to Marketo | Salesforce | Linked to people through Opportunity Contact Roles. One currency only (Marketo’s default) |
| Program members and statuses | Campaign members and statuses | Two-way | Marketo usually runs the program | One program maps to one campaign. Channel and period cost go to Salesforce as campaign type and actual cost |
| Activity log | Tasks and events | Salesforce to Marketo | Salesforce | Marketo can create tasks with a flow step, or push chosen activities as Activity History if you don’t use Sales Insight |
| Sales owner fields | User (lead and account owner) | Salesforce to Marketo | Salesforce | Owner name, title, phone and email for email signatures and routing. Change owners with the Change Owner flow step |
| Custom object | Custom object | Salesforce to Marketo | Salesforce | Must link to a lead, contact or account, one or two levels deep. Usable in smart lists and triggers |
When both systems change the same record in the same cycle, Adobe says Marketo wins for leads and Salesforce wins for contacts. Collisions are rare, but they explain the occasional value that “won’t stick”.
Requirements before you connect
According to Adobe’s Experience League documentation as of October 2026:
- Salesforce API access. Enterprise and Unlimited editions have it. Professional Edition doesn’t by default; you need to ask your Salesforce account executive for it. Adobe has separate setup guides for the two cases: Professional sets field access through page layouts instead of profiles.
- A dedicated sync user (for example marketo@yourcompany.com) on its own profile, so you can tell Marketo’s changes from people’s and control exactly what Marketo sees. Adobe’s guide creates it with the Salesforce user license.
- Profile permissions: API Enabled, Edit HTML Templates, Manage Public Documents, Manage Public Templates, Convert Leads, Edit Events, Edit Tasks, and read, create, edit and delete on accounts, contacts, leads, opportunities and, for campaign sync, campaigns. For campaign sync, tick Marketing User on the sync user.
- Authentication. If your Marketo subscription shows a Login with Salesforce button, it connects through OAuth; otherwise it uses the sync user’s username, password and security token. Salesforce began restricting the use of uninstalled connected apps in September 2025, and since the Spring ’26 release new connected apps can’t be created by default, so Adobe now documents creating an External Client App for the sync. Marketo Support enables OAuth on the Marketo side.
- One org, chosen on purpose. Adobe’s setup guide warns that once the sync starts with a set of credentials, you can’t switch the Salesforce credentials or subscription. Connect a Marketo sandbox only to a Salesforce sandbox, and production only to production.
Adobe’s guide is blunt about this: once you click Sync Fields, every field the sync user can see is created in Marketo permanently and can’t be deleted. Agree with marketing on the fields they need, and remove read access on everything else in the sync user’s field-level security before you connect.
How to set up the Marketo Salesforce sync, step by step
Plan one to three weeks end to end. The clicks take an hour; the decisions and cleanup take the rest.
- Write down the handoffAgree with sales on the score or behavior that makes a person a marketing-qualified lead, who assigns the owner (Salesforce assignment rules or a queue) and what sales does next. Every later setting follows from this page.
- Add the Marketo fields in SalesforceOn both leads and contacts, create Score (number), Acquisition Program (text) and Acquisition Date (date/time) with the field names from Adobe’s guide (mkto71_Lead_Score and so on). Make them read-only for people and editable for the sync user’s profile, and map the lead fields to contact fields so values survive lead conversion.
- Create the sync user and profileClone Standard User into a “Marketo-Salesforce Sync” profile with the permissions above, then create the dedicated user on it. Adobe suggests Password Never Expires on the profile so the sync doesn’t stop on a password reset.
- Trim what the sync user seesIn field-level security, clear read and edit access on custom fields marketing doesn’t need. If whole groups of records shouldn’t sync (partners, internal test leads, non-marketable records), ask Marketo Support about a custom sync filter, ideally before the first sync.
- Clean Salesforce dataMerge duplicate leads and contacts, fill Company and Last Name, and list validation rules and required fields the sync user will hit. Marketo respects them: a record that fails a rule fails to sync.
- Connect in a sandbox pair firstIn Marketo, go to Admin, CRM, Sync with Salesforce.com. Log in with the sync user (OAuth) or enter username, password and security token, tick Sandbox for a sandbox pair, and click Sync Fields. Review field mappings before you click Start Salesforce Sync: Adobe warns that this step is final.
- Turn on what you need, nothing moreIn Admin, Salesforce, enable campaign sync if programs should map to Salesforce campaigns (match program and campaign statuses first). Enable custom objects in Salesforce Objects Sync only if marketing will segment on them.
- Build the handoff campaignA Marketo smart campaign that, when a person crosses your threshold, runs Sync Person to SFDC with the owner set by assignment rules or a queue. Optionally add Create Task so the owner gets a follow-up.
- Test real scenariosPush a new lead, change an owner in Salesforce, convert a lead, add a contact role to an opportunity, change a picklist value, delete a lead. Check each result on both sides and in the person’s Activity Log.
- Go live and watch the dashboardsRepeat the setup in production. During the first weeks, check the Sync Errors, Sync Status and backlog views in Admin, Salesforce every day until the backlog stays flat.
Field sync: what the docs say happens to your fields
Field behavior is where most surprises come from. From Adobe’s field sync documentation:
| Change in Salesforce | What happens in Marketo | What to do |
|---|---|---|
| New field visible to the sync user | Created in Marketo automatically on the next cycle | Create shared fields in Salesforce first, never in Marketo first. Existing values arrive only when each record next updates |
| Label renamed | Marketo label stays the same | Rename it in Marketo too if people search by label |
| API name changed | A new field is created in Marketo | Avoid it; if unavoidable, migrate smart lists and hide the old field |
| Field type changed | Marketo warns, then deletes values that don’t fit the new type | Export the values and re-import after the change |
| Field deleted | The Marketo field stays but stops syncing | Hide it in Marketo |
| New picklist value | Marketo sends a notification | Update forms and smart lists that rely on the values |
| Lookup field | Only the record ID syncs, not the name | Add a formula or text field with the name if marketing needs it |
| Formula field | Syncs, but changes in referenced fields arrive only when the record’s system timestamp updates | Don’t build time-critical triggers on formula fields |
To stop Marketo from overwriting a Salesforce-owned field, take edit access on that field away from the sync user’s profile. To protect a Marketo field from certain sources, use Block Field Updates under Admin, Field Management, Field Actions, and check which sources your instance offers. Blocking protects existing values: an empty field still accepts the first value it receives.
Lead lifecycle and the scoring handoff
The integration exists for one moment: the handoff from marketing to sales. A clean version looks like this:
- Marketo scores a person from behavior and fit. The score syncs to the Score field on the Salesforce lead or contact.
- When the person crosses your threshold, a smart campaign runs Sync Person to SFDC. The lead appears in Salesforce right away and gets an owner from your assignment rules or a queue you choose. Salesforce rejects leads without Company and Last Name, so set defaults or require both on forms.
- The owner works the lead in Salesforce. Status changes sync back to Marketo, where you can pause nurture or change it.
- When the rep converts the lead, Marketo sees one contact. Opportunity stage and amount flow into Marketo as long as the contact has a contact role on the opportunity.
- Campaign sync and opportunity data feed reporting, so marketing can see which programs led to pipeline.
Watch for implied actions. Adobe documents that flow steps such as Add to SFDC Campaign, Change Owner, Create Task and Convert Person first push the person to Salesforce if they aren’t there yet. A campaign meant only to add people to a Salesforce campaign can quietly create thousands of leads. Also avoid Convert Person unless you’re sure: it creates a new contact, account and opportunity, and Adobe recommends converting in Salesforce to avoid duplicate accounts.
Built by Gilzor
Results we’ve shipped




Talk to the people who build it. Tell us about your project and get a free estimate of scope, timeline and cost.
Marketo Sales Insight: marketing data inside Salesforce
The sync moves records. Marketo Sales Insight (MSI) shows reps why a lead matters. It’s a package you install in Salesforce from AppExchange (now AgentExchange), with an option to install in a sandbox first. It adds a Marketo panel to lead, contact, account and opportunity pages with Interesting Moments, web activity, email and score tabs, “Stars and Flames” priority indicators, and actions such as Add to Marketo Campaign and Send Marketo Email.
Adobe also offers Sales Insight Actions, a web application that works with Salesforce through the MSI package. It adds sales emails with tracking, sequences of emails and tasks, and calling. If you don’t use MSI, the sync’s Customize Activities Sync option can instead push selected Marketo activities (form fills, emails sent and so on) to Salesforce as Activity History. Adobe notes that turning it on pushes three months of history, which can take several days.
Salesforce API usage and the sync backlog
The sync runs on your Salesforce API allocation, which every other integration shares. Adobe’s knowledge base article on how Marketo uses the Salesforce API, as of October 2026, says:
- About 25 calls per sync session just to check for changes, or roughly 7,200 a day at the default 5 minute interval.
- Records move in batches of up to 200 per call. Trigger campaigns with Salesforce flow steps use at least one call per person; batch campaigns can send up to 200 people per call.
- Enterprise Edition orgs rarely hit the limit; orgs with more limited editions or few licenses can. Marketo Support can lengthen the sync interval (around 1,000 calls a day at 30 minutes). Check usage in Salesforce under Company Information, “API Requests, Last 24 Hours”.
Backlog is the other limit. Any Salesforce update that changes a record’s system timestamp queues it for sync, so a bulk update, a busy integration or a frequently changing field can pile up thousands of records. Marketo’s Admin, Salesforce page shows a backlog trend for the last five days, throughput per object and a Backlog Status that reads “Growing” when the backlog is bigger than six hours earlier. Adobe’s fixes: hide fields and records marketing doesn’t need, schedule bulk updates off-hours, disable custom objects and activity syncs nobody uses, and clear sync errors.
If you build your own integration on Marketo’s REST API, its limits apply too. According to Adobe’s developer documentation, a subscription gets 50,000 API calls a day, with at most 100 calls per 20 seconds and ten concurrent calls per instance.
Common problems and how to fix them
| Problem | Why it happens | Fix |
|---|---|---|
| Lead won’t sync to Salesforce | Missing Company or Last Name, a validation rule, a required field or a restricted picklist value | Read the person’s Activity Log and the Sync Errors tab; set default Company and Last Name, or exempt the sync profile from rules where it’s safe |
| Duplicates | Marketo doesn’t deduplicate automatically against the sync or manual entries; contacts assigned to a lead queue create a duplicate lead | Salesforce duplicate rules, merge existing duplicates before go-live, never route contacts to lead queues |
| Sync backlog keeps growing | Too many visible fields and records, bulk updates, other integrations touching records | Hide unneeded fields, ask Support for a sync filter, schedule bulk jobs, review custom objects and activities |
| Field updates don’t stick | The sync user has no edit access, a Block Field Updates setting, or both systems change the field | One owner per field; check field-level security and blocking settings |
| “Has Opportunity” is empty | Opportunities without contact roles don’t belong to anyone in Marketo | Make contact roles required, or add them with a Salesforce Flow |
| Salesforce campaigns missing in Marketo | Campaign sync off, or the sync user isn’t a Marketing User | Enable campaign sync and tick Marketing User |
| Campaign status errors | Program statuses don’t match the Salesforce campaign member statuses | Match statuses before you link a program to a campaign |
| Deleted leads still in Marketo | Deleting in Salesforce only sets the SFDC Is Deleted flag | A smart campaign that deletes or archives flagged people |
| Sync stops after a password change | The sync user’s password expired or someone reset it | Password Never Expires on the sync profile, and a sync user nobody logs in as |
| Data that shouldn’t be in Marketo | The sync user can see everything a standard user sees | Field-level security and a sync filter; hide sensitive fields before Sync Fields |
Merges are mostly automatic. Merging leads in Salesforce merges the people in Marketo; scores are summed, activity logs are combined, and a non-empty value from the losing record fills an empty field on the winner.
When to customize beyond the native sync
The native sync is built for one Marketo instance and one Salesforce org sharing people and campaigns. Look further when:
- Marketing data must land on opportunities or accounts, such as engagement scores on accounts for ABM. The sync only reads these objects, so a Salesforce Flow or an external service has to write them.
- Several Salesforce orgs or regions feed one Marketo instance, or you are mid-merger with two orgs.
- A third system is in the flow: product usage, billing, a data warehouse or a second CRM. Our guide to the Salesforce MuleSoft integration covers the iPaaS route.
- Compliance needs such as per-record audit trails or consent logic that the sync can’t express.
Custom work here is usually small and targeted: a Salesforce Flow, an iPaaS recipe or a service that reads Marketo’s REST API, applies your rules and writes to Salesforce with retries and logging. Our API integration cost guide breaks down where the hours go.
Comparing marketing platforms? See how the HubSpot Salesforce integration and the Mailchimp Salesforce integration handle the same handoff, and how website forms reach Salesforce. For projects that combine several systems, see the cost of data integration.
Go-live checklist
Tick what is true for your setup. It shows how ready you are to start the sync in production.
Marketo Salesforce go-live
FAQ
Does Marketo integrate with Salesforce natively?
How often does Marketo sync with Salesforce?
Can Marketo update Salesforce opportunities or accounts?
What permissions does the Marketo sync user need in Salesforce?
Does the Marketo sync use Salesforce API calls?
Why are leads not syncing from Marketo to Salesforce?
Where Gilzor fits
The native sync is the right start for almost every Marketo and Salesforce pair. When you need more, such as account-level data from Marketo, several orgs or a third system in the flow, Gilzor’s engineers in Poland and Cyprus can map the data flow, build the integration and support it after launch. See Gilzor’s Salesforce integration services.
No sales pitch
Get a straight answer for your project
Tell us what you’re building. We’ll reply with options, a rough cost and timeline. If we’re not the right fit, we’ll say so.

CTO of Gilzor. Responsible for architecture and the engineering standards our teams work by.
LinkedIn →Gilzor · Web Development partner
Need a team for your web product?
Services
Web DevelopmentCustom websites and web apps — front-end, back-end, launch and support.→By company type
Selected projects






The team behind them





