Loading
Salesforce now sends email only from verified domains. Read More
Help Agent Performance DegradationRead More
Identify Your Users and Manage Access
Table of Contents
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

          Search all of Salesforce Help
          Complete Prerequisites for Headless Identity

          Complete Prerequisites for Headless Identity

          Before you get started with a Headless Identity implementation for your off-platform apps, cross off these prerequisites in Salesforce.

          Required Editions

          Available in: both Salesforce Classic and Lightning Experience
          Available in: Enterprise, Unlimited, and Developer Editions
          1. To define the right levels of access for yourself and your users, create a role for yourself and a profile for your end users.
          2. To store information about your end users, create an account for them.
          3. If you don’t have one already, set up an Experience Cloud site.
            Because Headless Identity APIs are exposed for external users through Experience Cloud, you must create an Experience Cloud site even if your users’ don’t interact with it directly.
            1. Enable Digital Experiences.
            2. Create an Experience Cloud site.
            3. Add the end user profile you created to your Experience Cloud site membership.
            4. Activate your Experience Cloud site.
          4. To let your app communicate with Salesforce, configure Cross-Origin Resource Sharing (CORS) settings.
            1. Add your app’s URL pattern to your CORS allowlist.
            2. Enable CORS for OAuth endpoints.
          5. Enable the Authorization Code and Credentials Flow at an org-wide level. This flow is the foundation of headless login, registration, passwordless login, and guest user identity.
            1. From Setup, in the Quick Find box, enter OAuth, and then select OAuth and OpenID Connect Settings.
            2. Turn on Allow Authorization Code and Credentials Flows.
           
          Loading
          Salesforce Help | Article