Skip to Content
IntegrationsMarketplace OffersGetting started

Getting started with Marketplace Offers

This page shows how to connect your AWS Marketplace seller account to FlowState and how to prepare the card for your sellers. You deploy a connector role in the seller account, then FlowState checks it.

The connector creates one IAM role, FlowStateMarketplaceConnector, with an inline policy that lets FlowState read your SaaS products and manage your private offers. See Trust policy for the details.

Before you start

Complete the prerequisites.

Connect the seller account

  1. In FlowState, go to Settings → Integrations → Marketplace and click Set up Marketplace connector.
  2. On the Connect AWS Marketplace page, under Deploy the connector role, find the External ID and the FlowState principal ARN values. You need all of them.
  3. Choose a tab and deploy the role:
  4. Under Verify the role, paste the role ARN into Role ARN and click Connect.

Result: FlowState shows Marketplace connector verified and opens Settings → Integrations → Marketplace, which shows Marketplace connector active and your seller account ID.

If FlowState shows Connection failed, see AccessDenied on connect.

OpenTofu

  1. In a new directory, save the main.tf snippet from the page. It uses the published FlowState module with your values filled in.
  2. Sign in with AWS credentials for the seller account.
  3. Run tofu init && tofu apply and confirm.
  4. Copy the flowstate_marketplace_role_arn output.

CloudFormation

  1. Click Launch in AWS Console. The AWS console opens the quick-create page with the stack name and the two parameters filled in: FlowstatePrincipalArns (every FlowState principal ARN, separated by commas) and ExternalId.
  2. Sign in to the seller account, if you are not signed in.
  3. Select the check box that allows CloudFormation to create IAM resources with custom names, and click Create stack.
  4. When the stack status is CREATE_COMPLETE, open the Outputs tab and copy RoleArn.

To deploy the template another way, click Download template to get marketplace-connector.yaml, and enter the parameter values from the tab.

Important

Include every FlowState principal ARN. One is used by the web app and the HubSpot card, the other by AI assistants (MCP). If one is missing, that way of working fails with AccessDenied.

Prepare the card for your sellers

These sections are on Settings → Integrations → Marketplace, below the connector status.

Give sellers access

On the HubSpot card, every HubSpot user can only view offers until you give them a role.

  1. Under HubSpot user access, pick the user in Pick a HubSpot user, or enter the HubSpot user id and HubSpot user email. The picker lists only users who have opened the Marketplace tab of the card once.

  2. Choose a Role:

    RoleCan do on the card
    viewerSee the selected product and the offers. This is the default.
    creatorAlso create and clone offers.
    adminAlso release, change and expire offers.

  3. Click Grant access.

To take access away, click the delete icon next to the user.

Upload custom EULAs (optional)

Sellers can use AWS’s standard EULA, or a EULA that you upload here.

  1. Under Custom EULAs, enter a EULA name.
  2. Choose the EULA document: PDF, DOC, DOCX, TXT or HTML, up to 4 MB.
  3. Click Add EULA.

Set offer defaults (optional)

A default offer template fills in the offer form on the card: currency, contract duration, the expiration window, quantity and EULA. Sellers can still change every value.

  1. Under Offer defaults, click New template.
  2. Enter a Name and the values.
  3. Click Create template.
  4. Click the star next to the template to make it the default.

Next step

Create a first offer from a deal. See Creating offers.

PrerequisitesCreating offers