Headless Identity Implementation Guide

What Is Headless Identity?
Complete Prerequisites for Headless Identity
Set Up an Authentication Provider for Single Sign-On
Set Up an Experience Cloud Site for Headless Identity
Set Up an External Client App for Headless Identity
Create an OAuth-Enabled External Client App
Configure External Client App Policies
Get Your Consumer Key
Use Postman to Work with Headless Identity APIs
JavaScript Examples for Headless Identity APIs
PDF

Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

Configure External Client App Policies

In a standard OAuth flow, users often see an approval page where they confirm that an external client app is allowed to access their Salesforce data. With headless identity flows, you don’t want to show users a Salesforce approval page. To preapprove access, configure OAuth policies on your external client app.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

  1. Go to your external client app policy page.
    1. From Setup, in the Quick Find box, enter App, and then select App Manager.
    2. Next to your app, click External client app edit dropdown arrow, and then select Edit Policies.
  2. Click Edit Policies.
  3. Under OAuth Policies, set the Permitted Users policy to Admin approved users are pre-authorized.
  4. Save the policy change.
  5. On the external client app policy page, scroll down to and select Manage Profiles.
  6. Select the headless demo profile that you created.
  7. Save the policy change.