Configure External Client App Policies

In a standard OAuth flow, users often see an approval page where they confirm that an external client app is allowed to access their Salesforce data. With headless identity flows, you don’t want to show users a Salesforce approval page. To preapprove access, configure OAuth policies on your external client app.

Required Editions
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions

Go to your external client app policy page.
1. From Setup, in the Quick Find box, enter App, and then select App Manager.
2. Next to your app, click , and then select Edit Policies.
Click Edit Policies.
Under OAuth Policies, set the Permitted Users policy to Admin approved users are pre-authorized.
Save the policy change.
On the external client app policy page, scroll down to and select Manage Profiles.
Select the headless demo profile that you created.
Save the policy change.