---
schema_version: "1"
id: c01168ad25ceea00a0d00439b98bfa7dbc44b5d161dd3096261f3ba8f58db3bc
title: Advanced Apex Class Check for Integration Procedures in Omnistudio for Managed Packages
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/os_ip_advanced_apex_class_check.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.os_ip_advanced_apex_class_check.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 16976c1f1f19a3120a90f08ee7e6cfbed7a1db5ed4d60168923de085a193412a
description: The advanced Apex class check is performed through the ApexClassCheckForIP security flag. The ApexClassCheckForIP flag strengthens Omnistudio security by enforcing Apex class access checks during Integration Procedure execution. This enhancement makes sure that users have the required permissions to run custom Apex classes referenced within Integration Procedures.
products:
  - Omnistudio
release: "264"
---
# Advanced Apex Class Check for Integration Procedures in Omnistudio for Managed Packages

The advanced Apex class check is performed through the ApexClassCheckForIP security flag. The ApexClassCheckForIP flag strengthens Omnistudio security by enforcing Apex class access checks during Integration Procedure execution. This enhancement makes sure that users have the required permissions to run custom Apex classes referenced within Integration Procedures.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio_for_managed_packages-264-0-0-production-enus/aa2554ec-624a-4ee6-8da4-6435670e6e62/images/icon_note.png)

Note In Vlocity Industries managed package orgs, Apex class validation during direct Integration Procedure execution is enforced through the ApexClassCheckForIP flag, as this scenario is not covered by the ApexClassCheck flag alone. This behaviour applies to Insurance (INS), Communications, Media, and Energy (CME), and Financial Services Cloud – Insurance (FSC-INS).

When enabled, `ApexClassCheckForIP` validates user access to custom Apex classes used within Integration Procedures. This validation applies only when an Integration Procedure is invoked directly. When an Integration Procedure is invoked through a Flexcard or an Omniscript, Apex class access checks are already enforced and are not affected by this flag. By default, the `ApexClassCheckForIP` flag is disabled.

The `ApexClassCheckForIP` flag works along with the existing `ApexClassCheck` flag. If `ApexClassCheck` is set to false, the `ApexClassCheckForIP` flag is ignored. Both flags must be enabled for Apex class access validation to occur during direct Integration Procedure execution.

The steps to enable the `ApexClassCheckForIP` flag and the location of the settings depend on whether the org has an Omnistudio license and whether it uses a custom data model or standard data model. Depending on your org's Omnistudio license status and data model, locate and configure the flag. For information about data models, see [Omnistudio Data Models](https://help.salesforce.com/s/articleView?id=xcloud.os_migrate_omnistudio_custom_objects_to_standard_objects.htm&type=5&language=en_US), [Does Your Org Use Custom or Standard Objects?](https://help.salesforce.com/s/articleView?id=xcloud.os_does_your_org_use_custom_or_standard_objects.htm&language=en_US&type=5).

To enable the `ApexClassCheckForIP` flag in orgs without an Omnistudio license or orgs still using custom data model:

1. From Setup, in the Quick Find box, enter Custom Settings, and then select **Custom Settings**.
2. Click **G** and go to **General Settings**.
3. Click **Manage**.
4. Click **New**.
5. In the Label field, enter ApexClassCheckForIP.
6. In the Value field, enter true.

To enable the `ApexClassCheckForIP` flag in orgs with an Omnistudio license using the standard data model:

1. From Setup, in the Quick Find box, enter Omni Interaction Configuration, and then select **Omni Interaction Configuration**.
2. Click **New Omni Interaction Configuration**.
3. In the Label field, enter ApexClassCheckForIP.
4. In the Value field, enter true.

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio_for_managed_packages-264-0-0-production-enus/aa2554ec-624a-4ee6-8da4-6435670e6e62/images/icon_important.png)

Important During the week of February 2, 2026, Salesforce enables the ApexClassCheckForIP setting by default to enhance org security. Review and prepare your configuration for a seamless transition and to prevent potential service interruptions. See [Advanced Security Checks for Omnistudio for Managed Packages](https://help.salesforce.com/s/articleView?id=xcloud.os_advanced_security_updates_overview.htm&release=264.0.0&type=5 "Advanced security checks for Omnistudio for Managed Packages enhance data protection by enforcing stricter validation of access and permissions. When enabled, these checks validate object-level access, field-level security, and Apex class permissions for all users, including guest, authenticated, and non-authenticated users, across Omnistudio components.").