In the world of Salesforce Commerce Cloud (SFCC), efficiency and security are paramount. However, there's often a dilemma when it comes to accessing SFCC Orders from external platforms. A common challenge faced by many is the need for Business Manager (BM) Grants, which requires the use of account manager credentials that expire every 90 days. This raises a critical question: is it really necessary to manually reset a password every 90 days for server-to-server communication? In this article, we'll provide you with a more convenient and secure solution. <h2 id="37ebe370-b374-4f64-aa83-47b03c67efae" data-toc-id="37ebe370-b374-4f64-aa83-47b03c67efae">The Password Reset Predicament</h2>The issue at hand revolves around the need for frequent password resets to maintain access to SFCC Orders via Open Commerce API (OCAPI). The 90-day expiration of <a target="_new" rel="noopener" href="https://sfcclearning.com/infocenter/content/b2c_commerce/topics/account_manager/b2c_account_manager_overview.php">account manager</a> credentials poses a substantial operational challenge, requiring manual intervention and potential disruptions in the workflow. However, there's a better way to manage this.<h2 id="33b8c7a9-106f-4f38-bb01-8ac138441dd4" data-toc-id="33b8c7a9-106f-4f38-bb01-8ac138441dd4">Unlock SFCC Pro Tips!</h2>Imagine what you’re missing in our other guides! Stay ahead of the competition, get exclusive pro tips, and master Salesforce Commerce Cloud like never before.👉 <a target="" rel="noopener noreferrer" href="https://www.sfcclearning.com/subscribe">Subscribe NOW and never struggle with SFCC again!</a><h2 id="ee901401-7a6f-418b-8bbb-0b0c8ea3bdf4" data-toc-id="ee901401-7a6f-418b-8bbb-0b0c8ea3bdf4">Enter Access Keys</h2>Access keys offer a streamlined solution to the password reset conundrum. Instead of relying on traditional account manager credentials, you can use a BM (Business Manager) user with a security key, which has an impressive lifespan of one year. This means you won't have to worry about resetting passwords every 90 days.<h2 id="1964c391-d4bd-4996-9fae-927cca018808" data-toc-id="1964c391-d4bd-4996-9fae-927cca018808">Generating Security Keys</h2>You have two options for generating these security keys:<ol><li><a target="_new" rel="noopener" href="https://sfcclearning.com/infocenter/OCAPI/current/usage/OpenCommerceAPI.php">OCAPI</a>: You can utilize OCAPI to generate new security keys. This approach empowers you to automate the process and ensure seamless server-to-server communication without the hassle of frequent password resets.</li><li>Business Manager (BM): Alternatively, you can create and manage security keys via the Business Manager. Simply navigate to Administration &gt; Organization &gt; Users &gt; Access Keys to set up and control access keys for your BM user. These keys, unlike passwords, have an extended validity of one year.</li></ol><img src="https://f.ezycourse.net/4154/cm7expt9j05hdtr9n4sp261uy.png" alt="image" style="width: 100%; height: auto; cursor: pointer;" draggable="true"><h2 id="cc9296ef-0dfd-43f5-aed8-d666e0714486" data-toc-id="cc9296ef-0dfd-43f5-aed8-d666e0714486">A Solution that Lasts to Avoid Password Reset Every 90 Days</h2>Access keys are linked to a user in the Business Manager. Even if the user's password expires, the access key remains valid for a full year, offering both convenience and security. This means you can say goodbye to 90-day calendar reminders and the associated password reset headaches.<h2 id="4f600dec-b850-432d-aa82-00e25551a4f7" data-toc-id="4f600dec-b850-432d-aa82-00e25551a4f7">Further Resources</h2>For detailed instructions and additional insights, consider exploring these helpful links:<ul><li><a target="_new" rel="noopener" href="https://sfcclearning.com/infocenter/content/b2c_commerce/topics/admin/b2c_access_keys_for_business_manager.php">SFCC Learning - Access Keys for Business Manager</a></li><li><a target="" href="https://developer.salesforce.com/docs/commerce/b2c-commerce/references/b2c-commerce-ocapi/get-started-with-ocapi.html">Salesforce Commerce - OCAPI Data API Reference</a></li></ul>In conclusion, while the need for BM Grants and frequent password resets may seem cumbersome, there's a smarter way to handle SFCC Order access. Embrace access keys, either through OCAPI or BM, and enjoy the convenience of a one-year security key that simplifies server-to-server communication in Salesforce Commerce Cloud.<hr><h2 id="045b502b-3a53-42ba-8afd-4a65bb02d429" data-toc-id="045b502b-3a53-42ba-8afd-4a65bb02d429">Recommended Courses</h2><ul><li><a target="_blank" href="https://www.sfcclearning.com/course-detail/salesforce-javascript-developer-certified-tests/17822">Salesforce Javascript Developer I - Certification Tests</a></li><li><a target="_blank" href="https://www.sfcclearning.com/course-detail/course-b2c-commerce-developer/17905">Salesforce B2C Commerce Developer - Certification Tests</a></li><li><a target="_blank" href="https://www.sfcclearning.com/course-detail/salesforce-b2c-commerce-architect-certification-tests/17955">Salesforce B2C Commerce Architect - Certification Tests</a></li><li><a target="_blank" href="https://www.sfcclearning.com/course-detail/sfcc-d2c-quick-start-guide/19116">Salesforce Commerce Cloud D2C: Quick Start Guide</a></li></ul>

Tired of resetting passwords every 90 days in SFCC? Discover how access keys can simplify order access while enhancing security.

Simplifying SFCC Order Access: Say Goodbye to Password Resets Every 90 Days

A Solution that Lasts to Avoid Password Reset Every 90 Days

Discover expert insights, best practices, and in-depth guides on Salesforce Commerce Cloud. Stay ahead with SFCC Success Secrets and optimize your e-commerce strategy today!

Simplifying SFCC Order Access: Say Goodbye to Password Resets Every 90 Days

Simplifying SFCC Order Access: Say Goodbye to Password Resets Every 90 Days

Related Posts

Bad Data Travels Fast in SFCC. Validate It Before It Spreads

Data purging in SFCC is not housekeeping. It is architecture.

SFCC Integrations: The Endpoint Working Is Not Enough

SFCC Cache: Fast Is Useless If It’s Wrong

Your SFCC jobs don’t fail in production. They fail in design.