---
schema_version: "1"
id: 6f0d70ef8e4ade96c3c54d3f90a37b9a95b059d8ea66373912c695847ffa9125
title: API-Only Users Are Blocked from Bridging into UI Sessions
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_security_singleaccess_frontdoor.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_singleaccess_frontdoor.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 82977221375e515f3da5e30ea9d8698f223e0f3aae0c942e0bee952a97287bb9
description: To improve security, users with the API Only User permission can no longer bridge into UI sessions by using the frontdoor URL generated by the /services/oauth2/singleaccess endpoint, also known as UI Bridge API. This change can break integrations that unintentionally grant UI access to API-only users.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# API-Only Users Are Blocked from Bridging into UI Sessions

To improve security, users with the API Only User permission can no longer bridge into UI sessions by using the frontdoor URL generated by the /services/oauth2/singleaccess endpoint, also known as UI Bridge API. This change can break integrations that unintentionally grant UI access to API-only users.

**Where:** This change applies to Lightning Experience and Salesforce Classic (not available in all orgs) in all editions.

**How:** If you call the /services/oauth2/singleaccess endpoint with an access token that was issued to an API-only user, the call fails with a `Bad_OAuth_Token` error.

To allow these users to bridge into UI sessions via frontdoor URLs, remove the API Only User permission.

#### See Also

- [_Salesforce Help_: Generate a Frontdoor URL to Bridge into UI Sessions](https://help.salesforce.com/s/articleView?id=xcloud.frontdoor_singleaccess.htm&language=en_US)