Headless Identity Implementation Guide

What Is Headless Identity?
Complete Prerequisites for Headless Identity
Set Up an Authentication Provider for Single Sign-On
Create an Authentication Provider Registration Handler
Configure a Google Authentication Provider
Set Up an Experience Cloud Site for Headless Identity
Set Up an External Client App for Headless Identity
Use Postman to Work with Headless Identity APIs
JavaScript Examples for Headless Identity APIs
PDF

Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

Set Up an Authentication Provider for Single Sign-On

Authentication providers are one way of setting up single sign-on (SSO) from an external identity provider, like Google, into Salesforce. With a single parameter, you can link an authentication provider to your app to create an SSO experience that feels native. For this example, we set up a Google authentication provider so that your users can log in to Google from your app.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

This guide shows you how to create a registration handler, set up an authentication provider, and add it to your Experience Cloud site. This guide doesn’t cover a Postman example for configuring the OAuth 2.0 web server flow or user-agent flow to use the sso_provider parameter. For full setup instructions, see Create a Native Single Sign-On Experience in Your App in Salesforce Help.