We rotate the ODP private key used by our Campaign clients on a regular schedule. The process is fully manual: revoke and generate the key in the ODP UI, then copy it into the ODP Synchronization settings of each Campaign client, taking care to match the right environment and scope. Every step is a chance for human error, and a mistake silently breaks the integration, as we recently experienced.

We would like to see the manual copy paste removed from this flow, for example by letting Campaign fetch or receive the new key directly. Ideally the rotation could be fully automated on a schedule we define ourselves.

This would let us rotate keys regularly with much less risk.

Thanks a lot.