Headless Identity Implementation Guide

What Is Headless Identity?
Complete Prerequisites for Headless Identity
Set Up an Authentication Provider for Single Sign-On
Set Up an Experience Cloud Site for Headless Identity
Set Up an External Client App for Headless Identity
Use Postman to Work with Headless Identity APIs
Set Up Your Postman Workspace
Headless Registration Flow: Send a Registration Request
Headless Registration Flow: Send an Authorization Request
Headless Registration Flow: Send a Token Request
Headless Login: Send an Authorization Request
Headless Login: Send a Token Request
Headless Registration and Headless Login Flows: Get User Info
Headless Forgot Password Flow: Send a Password Reset Request
Headless Forgot Password Flow: Change the User’s Password
Headlessly Revoke an Access Token
JavaScript Examples for Headless Identity APIs
PDF

Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

Headless Forgot Password Flow: Change the User’s Password

After you receive a one-time password (OTP) from Salesforce, you can change your password with a new request to the forgot password endpoint. This example walks you through changing the password in Postman.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

  1. From the Headless Identity API Demo folder in Postman, select Forgot Password - Change Password.
    Note the location of the POST request. It’s the /services/auth/headless/forgot_password endpoint on your Experience Cloud site, which is the same endpoint you used for the initial reset request.
  2. To see the request body, click Body. The password reset request includes these parameters.
    • username—The user’s registered username
    • newpassword—The user’s new password.
    • otp—The one-time password (OTP) sent to the user’s email
  3. Replace the body parameter values with your own information.
    1. For username, enter the username that you registered and logged in with.
    2. For newpassword, enter a new password that includes uppercase and lowercase characters, a number, and a special character.
    3. For otp, enter the OTP that you received from your initial request to the forgot password endpoint.
  4. To send the request to Headless Forgot Password API, click Send.
    Salesforce validates the OTP and finishes resetting the password. If the request is successful, Salesforce sends a success response. Here’s an example response in Postman.
    1{
2    "status_code": "success"
3}