Salesforce Docs Portal

Complete Prerequisites for Headless Identity

Before you get started with a Headless Identity implementation for your off-platform apps, cross off these prerequisites in Salesforce.

Required Editions

Available in: both Salesforce Classic and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions
  1. To define the right levels of access for yourself and your users, create a role for yourself and a profile for your end users.
  2. To store information about your end users, create an account for them.
  3. If you don’t have one already, set up an Experience Cloud site.
    Because Headless Identity APIs are exposed for external users through Experience Cloud, you must create an Experience Cloud site even if your users’ don’t interact with it directly.
    1. Enable Digital Experiences.
    2. Create an Experience Cloud site.
    3. Add the end user profile you created to your Experience Cloud site membership.
    4. Activate your Experience Cloud site.
  4. To let your app communicate with Salesforce, configure Cross-Origin Resource Sharing (CORS) settings.
    1. Add your app’s URL pattern to your CORS allowlist.
    2. Enable CORS for OAuth endpoints.
  5. Enable the Authorization Code and Credentials Flow at an org-wide level. This flow is the foundation of headless login, registration, passwordless login, and guest user identity.
    1. From Setup, in the Quick Find box, enter OAuth, and then select OAuth and OpenID Connect Settings.
    2. Turn on Allow Authorization Code and Credentials Flows.