---
schema_version: "1"
id: dd113a4c9227f050e461f3183aea3dbd8b4e85f8d79ae6f82227c8deeff17665
title: Complete Prerequisites for Headless Identity
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/headless_identity_prerequisites.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.headless_identity_prerequisites.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 42a094c1b385ea9882517c32554ff0e7ca19a77442bf2f0ed8fb691c3d04d03d
description: Before you get started with a Headless Identity implementation for your off-platform apps, cross off these prerequisites in Salesforce.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Complete Prerequisites for Headless Identity

Before you get started with a Headless Identity implementation for your off-platform apps, cross off these prerequisites in Salesforce.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr></tbody></table>

1. To define the right levels of access for yourself and your users, [create a role for yourself and a profile for your end users](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_set_up_profiles.htm&type=5&language=en_US).
2. To store information about your end users, [create an account for them](https://help.salesforce.com/s/articleView?id=xcloud.external_identity_create_account.htm&type=5&language=en_US).
3. If you don’t have one already, set up an Experience Cloud site.
    
    Because Headless Identity APIs are exposed for external users through Experience Cloud, you must create an Experience Cloud site even if your users’ don’t interact with it directly.
    
    1. [Enable Digital Experiences](https://help.salesforce.com/s/articleView?id=experience.networks_enable.htm&type=5&language=en_US).
    2. [Create an Experience Cloud site](https://help.salesforce.com/s/articleView?id=experience.networks_creating.htm&type=5&language=en_US).
    3. [Add the end user profile you created to your Experience Cloud site membership](https://help.salesforce.com/s/articleView?id=platform.networks_customize_members.htm&type=5&language=en_US).
    4. [Activate your Experience Cloud site](https://help.salesforce.com/s/articleView?id=experience.networks_publish.htm&type=5&language=en_US).
4. To let your app communicate with Salesforce, configure Cross-Origin Resource Sharing (CORS) settings.
    1. [Add your app’s URL pattern to your CORS allowlist](https://help.salesforce.com/s/articleView?id=xcloud.extend_code_cors.htm&type=5&language=en_US).
    2. [Enable CORS for OAuth endpoints.](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_endpoints_cors.htm&type=5&language=en_US)
5. Enable the Authorization Code and Credentials Flow at an org-wide level. This flow is the foundation of headless login, registration, passwordless login, and guest user identity.
    1. From Setup, in the Quick Find box, enter OAuth, and then select **OAuth and OpenID Connect Settings**.
    2. Turn on **Allow Authorization Code and Credentials Flows**.