---
schema_version: "1"
id: 03256f4da60c3796d6144bf04faed23cb4f822817f6e83da3482cb8940caf4a6
title: March 2025
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_com_api_march_2025.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_com_api_march_2025.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d3ce8b38551212f91e917315825b0feb831fe088051c54485318b903c56f26e1
description: SCAPI and SLAS
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# March 2025

SCAPI and SLAS

For more detailed release information, see [B2C Commerce API Release Notes](https://developer.salesforce.com/docs/commerce/commerce-api/references/about-commerce-api/about.html).

SCAPI:

- B2C Commerce version 25.4:
    
    - The SCAPI Shopper Products GET [/product/shopper-products/v1/organizations/{organizationId}/products/{id}?expand=promotions](https://developer.salesforce.com/docs/commerce/commerce-api/references/shopper-products?meta=getProducts) endpoint and the OCAPI GET [/products/{id}/promotions](https://developer.salesforce.com/docs/commerce/b2c-commerce/references/ocapi-shop-products?meta=Get%2Bproduct%2Bpromotions) endpoint now return promotions with the same sort criteria as the Script API defaults.
- SCAPI request realm IDs are now verified for correct short code assignment.
- Custom APIs are now aligned with SCAPI Admin API endpoints with some constraints.
- With B2C Commerce version 25.3:
    
    - Hybrid authentication (Hybrid Auth) replaces Plugin SLAS. Hybrid Auth improves the performance and stability of hybrid storefronts by moving the feature directly into the B2C Commerce platform. For details, see [Hybrid Authentication](https://developer.salesforce.com/docs/commerce/commerce-api/guide/hybrid-auth.html).

SLAS

- Improved the SLAS Admin UI design and user experience.
- SLAS 404 and 5xx error logs are now available in the Log Center.
- The channel\_id (site) parameter is now required when requesting a guest access token with a grant\_type of client\_credentials. We have started enforcing the change for all production tenants effective 3/25/25.