Headless Identity Implementation Guide

What Is Headless Identity?
Complete Prerequisites for Headless Identity
Create a Role to Manage Headless Identity Features
Assign the Headless Identity Admin Role to Yourself
Set Up a Demo Profile for End Users
Set Up Cross-Origin Resource Sharing (CORS)
Create an Account for End Users
Enable the Authorization Code and Credentials Flow
Implement reCAPTCHA on a Web App
Set Up an Authentication Provider for Single Sign-On
Set Up an Experience Cloud Site for Headless Identity
Set Up an External Client App for Headless Identity
Use Postman to Work with Headless Identity APIs
JavaScript Examples for Headless Identity APIs
PDF

Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

Set Up a Demo Profile for End Users

For Headless Identity, you use profiles to define how your end users access data in Salesforce. New users are automatically assigned to this profile when they register. Create a demo profile so that you can test your headless login, registration, forgot password, and single sign-on processes as an end user.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

Instead of creating a new profile, you can clone an existing standard profile to get all of its preconfigured permissions and access settings. You can then customize the profile as needed. Because you use an Experience Cloud site to call Headless Identity APIs and store user data, your end users must be able to access Experience Cloud. We recommend cloning only these standard profiles so that users can log in via an Experience Cloud site.

  • Customer Community User
  • Customer Community Plus User
  • External Identity User
  • Partner Community User
  • Partner User

For this example, we clone the Customer Community User profile.

  1. From Setup, in the Quick Find box, enter Profiles, and then select Profiles.
  2. From the profile list, select the checkbox next to Customer Community User.
  3. Click Clone.
  4. Name the profile Headless Demo Profile.
  5. Save your changes.