Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

Set Up an External Client App for Headless Identity

The external client apps framework enables your off-platform app to request data from Salesforce APIs. To integrate your single-page app with Headless Identity APIs, create an external client app and configure its settings and access policies.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

As part of the external client app setup, you enable the Authorization Code and Credentials Flow. With this flow, you can set up headless login. Enabling this flow is also a prerequisite for enabling headless registration. You also define what Salesforce data your app can access with scopes and configure other security settings and access policies. And you define a callback URL, which you use as the redirect_uri parameter during headless flows.

After you create an external client app, you get a consumer key, or client_id. During headless flows, your app passes the consumer key to Salesforce to identify itself.