Form Pre-Fill Feature Upgrade | Community
Skip to main content
Roxann_McGlump1
Level 5
April 4, 2019

Form Pre-Fill Feature Upgrade

  • April 4, 2019
  • 142 replies
  • 55117 views

With the evolving best practices and awareness around data privacy, Marketo will be upgrading how we handle form pre-fill.

What change is being made?

Starting April 24, 2019, Marketo will only pre-fill form fields if the URL used to navigate to the Marketo landing page contains a valid mkt_tok URL parameter value (which occurs when users click tracked links in Marketo emails). What that means is, any time a person is viewing a Marketo landing page with a form, the URL being used must contain the mkt_tok token in the query string, otherwise the form on that landing page will not be pre-filled. If the URL in the browser window does have a valid mkt_tok tracking token, then the form within the page will pre-fill as expected with data corresponding to the person record associated with that mkt_tok.

Also note that if you are embedding Marketo Landing Pages within other web pages using an <iframe>, the mkt_tok would need to be passed from the parent page to the <iframe> URL if you intend for form prefill to work within the <iframe>

​How did it work before?

Previously, Marketo landing pages would rely on Munchkin tracking cookies to identify known person records, and forms would pre-fill based on that cookie. Form pre-fill did not require being linked to a Marketo landing page from a tracked email link.

Why is this changing?

This upgrade is being made to provide a more consistent and more secure experience with Marketo’s forms. We have identified that, in the past, people have experienced scenarios where data pre-filled into a form didn’t always correspond with the actual person viewing the page. For example, people using a shared computer or those who may have been cookied incorrectly by clicking through a forwarded email, could end up viewing incorrect data associated with a different person.

To provide a more consistent customer experience, and as a security enhancement, Marketo is upgrading the conditions under which the form pre-fill will display known customer information. In short, pre-fill will only work when users clickthrough links in Marketo emails, demonstrating that they have ownership of the email address associated with the known person record. Below is a list of different scenarios and how form pre-fill will work moving forward.

Please note, these changes to form pre-fill will not affect any other functionality of Marketo Forms, including the progressive profiling feature.

ScenarioWill the form pre-fill?Notes
Clicking a tracked link in a Marketo email to a Marketo landing page with a form which has pre-fill enabledYesThe email link must have mkt_tok enabled. Links that are not tracked or that have mkt_tok disabled will not work.
Navigating directly to a Marketo landing page with a form which has pre-fill enabledNoA direct link to the landing page will not have the mkt_tok present in the HTTP request.
Refreshing a Marketo landing page with a form which has pre-fill enabledNoThe mkt_tok is stripped from the URL after Marketo Landing Pages load so refreshing the page will not include the mkt_tok in the URL. As a result, pre-fill will not work.
Clicking a link in a sample email to a Marketo landing page with a form which has pre-fill enabledNoThe sample email will not have a valid mkt_tok attached to the link and so will not pre-fill the form. If you wish to test form pre-fill you will need to use a real email from a Marketo campaign.

Navigating to a non-Marketo page that includes an embedded Marketo form which has pre-fill enabled

NoThis behavior does not change with the upgrade. Pre-fill has never been supported for Marketo forms that are embedded on non-Marketo pages.
Navigating to a non-Marketo page that includes an <iframe> pointing to a Marketo Landing Page that includes a form with pre-fill enabledWith custom implementationThe form within the Marketo Landing Page that is being loaded in the <iframe> will pre-fill if the mkt_tok value from the original HTTP request is passed along to the <iframe> URL
Visiting a Marketo page with a mkt_tok that is not associated with the same person record as an existing Marketo Munchkin cookie currently stored on the browserNoThis will prevent the wrong person’s information from being displayed in cases where a computer is shared, or an email with a mkt_tok tracked link is forwarded to another person that may already be cookied as a known person in your database.
Copying a Marketo tracked link from an email and sharing/pasting it externally (email, blog, chat, social media post, etc.) that enables another individual to click the tracked linkYesThe tracked link in a Marketo email will redirect to a URL with the mkt_tok included, so anyone clicking this link will reach a page and see pre-fill data associated with the known person record from the “to” line of the email.
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

142 replies

Arjun_Datta
April 8, 2019

Hi Roxxann,

Copying a Marketo tracked link from an email and sharing/pasting it externally (email, blog, chat, social media post, etc.) that enables another individual to click the tracked linkYesThe tracked link in a Marketo email will redirect to a URL with the mkt_tok included, so anyone clicking this link will reach a page and see pre-fill data associated with the known person record from the “to” line of the email.

Does this mean if someone forwards an email to another person they automatically consent for their information to be viewed on a landing page form which will be pre-filled? Is it secure to provide 3d person data via forward process?

Thanks,

A

Steven_Vanderb3
Adobe Employee
Adobe Employee
April 8, 2019

Hi Arjun,

Emails sent from Marketo are meant for their intended recipient since they can be heavily personalized with tokens and snippets that reference their personal information.  If someone chooses to share what's in their inbox with others they know, that is their decision to make as it's not possible to block the forwarding of an email.  However, we do offer the Forward to a Friend functionality which would forward a version that wouldn't have tracked links associated to another person's record, and therefore not lead to pre-filled forms.  'Forward to a Friend Link' in Emails - Marketo Docs - Product Documentation

Roxann_McGlump1
Level 5
April 8, 2019

Hello Arjun,

If the person sending the link knows that their information may be displayed on the form prefill, then possibly they are implying consent, but this is not to be construed as anything legally binding on Marketo's part.  I would not consider this to be a secure form of information transfer, since anyone with the link can view the information on the form.

Raymond_Johnson
Level 3
April 8, 2019

Hi Roxxann,

I have a feeling this is going to break the way our subscription centers operate. Is there any way to test for the effects this is going to have on our instance before going live?

ChristinaZuniga
Level 9
April 8, 2019

What about PURLs? If someone goes to the page based on a direct mail that has a PURL in it, I'd expect the form to be pre-filled with their information. Is this accurate?

SanfordWhiteman
Level 10
April 8, 2019

Christina, pURLs never really work without my fix from a couple of years ago. And they actually require that there be no cookie upon the initial request. So I would say if anything Pre-Fill is moving backward into pURL-like behavior and pURLs should be unaffected. But time will tell.

ChristinaZuniga
Level 9
April 8, 2019

Will you share the link to your fix? I don't think I've seen it before.

SanfordWhiteman
Level 10
April 8, 2019
Jim_McLemore
Level 2
April 8, 2019

Is it possible to opt out of this "upgrade"?  I am pretty sure this is going to break some of our forms.  We created a gated program that they fill out one form and get access to a bunch of other content.  This is done through forms inside with just email address as a hidden field.  The button automatically fills out the form with their hidden cookied email address

I think it seems odd that we are completely losing the ability to do pre-fill unless the contact just clicked on a link.  This will break pre-fill for any micro-site style landing page and anyone who navigates more than one page of our site from a link. 

SanfordWhiteman
Level 10
April 8, 2019

Auto-Fill from a cookie isn't the same as Pre-Fill.