Headless Identity Implementation Guide

What Is Headless Identity?
Complete Prerequisites for Headless Identity
Set Up an Authentication Provider for Single Sign-On
Set Up an Experience Cloud Site for Headless Identity
Set Up an External Client App for Headless Identity
Use Postman to Work with Headless Identity APIs
Set Up Your Postman Workspace
Headless Registration Flow: Send a Registration Request
Headless Registration Flow: Send an Authorization Request
Headless Registration Flow: Send a Token Request
Headless Login: Send an Authorization Request
Headless Login: Send a Token Request
Headless Registration and Headless Login Flows: Get User Info
Headless Forgot Password Flow: Send a Password Reset Request
Headless Forgot Password Flow: Change the User’s Password
Headlessly Revoke an Access Token
JavaScript Examples for Headless Identity APIs
PDF

Headlessly Revoke an Access Token

To log out of your headless app, you can revoke the access token. This example walks you through headlessly revoking a token with Postman.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

  1. From the Headless Identity API Demo folder in Postman, select Revoke Token.
    Note the location of the POST request. It’s the /services/oauth2/revoke endpoint on your Experience Cloud site, which is the same endpoint that you used for the initial reset request.
  2. To see the request body, click Body. The revocation request includes only a token parameter.
  3. For the token parameter, replace <Token> with an access token that you obtained during headless registration or headless login.
  4. To send the request to the revocation endpoint, click Send.
    If the request is successful, you’re logged out.