Headless Identity Implementation Guide

What Is Headless Identity?
Complete Prerequisites for Headless Identity
Create a Role to Manage Headless Identity Features
Assign the Headless Identity Admin Role to Yourself
Set Up a Demo Profile for End Users
Set Up Cross-Origin Resource Sharing (CORS)
Create an Account for End Users
Enable the Authorization Code and Credentials Flow
Implement reCAPTCHA on a Web App
Set Up an Authentication Provider for Single Sign-On
Set Up an Experience Cloud Site for Headless Identity
Set Up an External Client App for Headless Identity
Use Postman to Work with Headless Identity APIs
JavaScript Examples for Headless Identity APIs
PDF

Enable the Authorization Code and Credentials Flow

The Authorization Code and Credentials Flow is the foundation of headless login and headless registration. Enable this flow at an org-wide level.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

  1. From Setup, in the Quick Find box, enter OAuth, and then select OAuth and OpenID Connect Settings.
  2. Turn on Allow Authorization Code and Credentials Flows.
    You receive a warning that changing this setting can break your integrations.
  3. To accept the warning, click OK.
    With this flow enabled, you can access settings to turn it on for a specific external client app.

Example

Toggle to turn on the Authorization Code and Credentials Flow