Headless Identity Implementation Guide

What Is Headless Identity?
Complete Prerequisites for Headless Identity
Set Up an Authentication Provider for Single Sign-On
Set Up an Experience Cloud Site for Headless Identity
Set Up an External Client App for Headless Identity
Create an OAuth-Enabled External Client App
Configure External Client App Policies
Get Your Consumer Key
Use Postman to Work with Headless Identity APIs
JavaScript Examples for Headless Identity APIs
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Set Up an External Client App for Headless Identity

The external client apps framework enables your off-platform app to request data from Salesforce APIs. To integrate your single-page app with Headless Identity APIs, create an external client app and configure its settings and access policies.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

As part of the external client app setup, you enable the Authorization Code and Credentials Flow. With this flow, you can set up headless login. Enabling this flow is also a prerequisite for enabling headless registration. You also define what Salesforce data your app can access with scopes and configure other security settings and access policies. And you define a callback URL, which you use as the redirect_uri parameter during headless flows.

After you create an external client app, you get a consumer key, or client_id. During headless flows, your app passes the consumer key to Salesforce to identify itself.