Headless Identity Implementation Guide

What Is Headless Identity?
Complete Prerequisites for Headless Identity
Create a Role to Manage Headless Identity Features
Assign the Headless Identity Admin Role to Yourself
Set Up a Demo Profile for End Users
Set Up Cross-Origin Resource Sharing (CORS)
Create an Account for End Users
Enable the Authorization Code and Credentials Flow
Implement reCAPTCHA on a Web App
Set Up an Authentication Provider for Single Sign-On
Set Up an Experience Cloud Site for Headless Identity
Set Up an External Client App for Headless Identity
Use Postman to Work with Headless Identity APIs
JavaScript Examples for Headless Identity APIs
PDF

Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

Complete Prerequisites for Headless Identity

Cross off some basic setup steps in Salesforce and Google.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

In Salesforce, these prerequisites include creating a role to manage your users, setting up a demo profile, enabling Cross-Origin Resource Sharing (CORS), and setting up an account to contain your users. You must also enable the Authorization Code and Credentials Flow at an org-wide level so that you can set up headless login and registration.

You must also implement Google reCAPTCHA to get a reCAPTCHA token so that you can use in the Postman examples. For single-page apps, with reCAPTCHA, you can secure your flow without passing secret information, like an integration user’s access token, in any of your requests to Salesforce.