Advanced Apex Class Check for Integration Procedures in Omnistudio for Managed Packages

The advanced Apex class check is performed through the ApexClassCheckForIP security flag. The ApexClassCheckForIP flag strengthens Omnistudio security by enforcing Apex class access checks during Integration Procedure execution. This enhancement makes sure that users have the required permissions to run custom Apex classes referenced within Integration Procedures.

Note In Vlocity Industries managed package orgs, Apex class validation during direct Integration Procedure execution is enforced through the ApexClassCheckForIP flag, as this scenario is not covered by the ApexClassCheck flag alone. This behaviour applies to Insurance (INS), Communications, Media, and Energy (CME), and Financial Services Cloud – Insurance (FSC-INS).

When enabled, ApexClassCheckForIP validates user access to custom Apex classes used within Integration Procedures. This validation applies only when an Integration Procedure is invoked directly. When an Integration Procedure is invoked through a Flexcard or an Omniscript, Apex class access checks are already enforced and are not affected by this flag. By default, the ApexClassCheckForIP flag is disabled.

The ApexClassCheckForIP flag works along with the existing ApexClassCheck flag. If ApexClassCheck is set to false, the ApexClassCheckForIP flag is ignored. Both flags must be enabled for Apex class access validation to occur during direct Integration Procedure execution.

The steps to enable the ApexClassCheckForIP flag and the location of the settings depend on whether the org has an Omnistudio license and whether it uses a custom data model or standard data model. Depending on your org's Omnistudio license status and data model, locate and configure the flag. For information about data models, see Omnistudio Data Models, Does Your Org Use Custom or Standard Objects?.

To enable the ApexClassCheckForIP flag in orgs without an Omnistudio license or orgs still using custom data model:

1. From Setup, in the Quick Find box, enter Custom Settings, and then select Custom Settings.
2. Click G and go to General Settings.
3. Click Manage.
4. Click New.
5. In the Label field, enter ApexClassCheckForIP.
6. In the Value field, enter true.

To enable the ApexClassCheckForIP flag in orgs with an Omnistudio license using the standard data model:

1. From Setup, in the Quick Find box, enter Omni Interaction Configuration, and then select Omni Interaction Configuration.
2. Click New Omni Interaction Configuration.
3. In the Label field, enter ApexClassCheckForIP.
4. In the Value field, enter true.

Important During the week of February 2, 2026, Salesforce enables the ApexClassCheckForIP setting by default to enhance org security. Review and prepare your configuration for a seamless transition and to prevent potential service interruptions. See Advanced Security Checks for Omnistudio for Managed Packages.