---
schema_version: "1"
id: fda2800511cc4af24e12ffc1fd3cb7bed2af34ce3eaa2d50ca8b4a58d674a370
title: Use Public API Clients with Account Manager
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_account_manager_public_clients.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_account_manager_public_clients.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ea784f6014a92c3921d1495870bf407cd9accd57f7906498cc0c08a1c610c12e
description: Account Manager now supports authorization code grant flows with Proof Key for Code Exchange (PKCE) for public API clients. Securely exchange OAuth tokens for client apps that can’t safely store a client secret. PKCE provides a more secure authentication flow for single-page, native mobile, and desktop apps.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# Use Public API Clients with Account Manager

Account Manager now supports authorization code grant flows with Proof Key for Code Exchange (PKCE) for public API clients. Securely exchange OAuth tokens for client apps that can’t safely store a client secret. PKCE provides a more secure authentication flow for single-page, native mobile, and desktop apps.

**Where:** This change applies to Account Manager for B2C Commerce.

**How:** Create an API client and set the client authentication type to public, or convert an existing, private API client. Account Manager then uses PKCE for the access token exchange, replacing the need for a client secret with a code verifier and challenge.

#### See Also

- [_Salesforce Help_: Add an API Client in B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_account_manager_add_api_client_id.htm&language=en_US)