--- schema_version: "1" id: 8917d0396887c7e056bbda5237267098e588a1f07cc813ae9eb7d81c9dcaa20a title: Configure Experience Cloud Settings for Headless User Discovery collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/remoteaccess_headless_discovery_settings.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_headless_discovery_settings.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 2f39d48ebc5437d784038703061924756405e9834875ac665d8c1faded789d42 description: With headless user discovery, develop headless authorization flows that don’t require users to enter a username. To use headless user discovery for login, passwordless login, and forgot password flows, configure settings on the Experience Cloud Login & Registration page. products: - Security - Cross Cloud release: "264" --- # Configure Experience Cloud Settings for Headless User Discovery With headless user discovery, develop headless authorization flows that don’t require users to enter a username. To use headless user discovery for login, passwordless login, and forgot password flows, configure settings on the Experience Cloud Login & Registration page. ### Required Editions
Available in: Enterprise, Unlimited, and Developer Editions
![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_important.png) Important All headless flows use the same headless discovery handler. You can’t use a different handler for each flow. To make sure that you complete all setup steps for headless identity, see [Headless Identity Implementation Checklists](https://help.salesforce.com/s/articleView?id=xcloud.headless_identity_implementation_checklist.htm&type=5&language=en_US). ## Configure Settings for Login with Any Identifier and a Password To configure login with an identifier of your choice and a password, use the Authorization Code and Credentials Flow or the OAuth 2.0 for First-Party Applications login flow. Both flows use the same settings for headless user discovery. 1. From Setup, in the Quick Find box, enter Sites, and then select **All Sites**. 2. To access Experience Workspaces, next to your site name, click **Workspaces**. 3. Select **Administration**, and then select **Login & Registration**. 4. Under Headless Username-Password Login, select **Use the headless user discovery handler for this flow**. 5. Under Headless User Discovery, click ![Lookup](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/resources-global/_corporate/images/lookup.png) and select an Apex class that implements the `Auth.HeadlessUserDiscoveryHandler` interface. Or, to generate a template, click **Create a headless user discovery handler template**. Edit the template later. 6. For Run As, click ![Lookup](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/resources-global/_corporate/images/lookup.png) and select a system user to execute the handler. We recommend that you don’t select a user account that’s associated with a person. 7. If necessary, configure other settings for the OAuth 2.0 for First-Party Applications login flow. See [OAuth 2.0 for First-Party Applications: Configure Experience Cloud Settings](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_auth_challenge_experience_settings.htm&type=5&language=en_US). 8. Save your settings. To continue setting up login, see these resources, depending on your flow. - [Authorization Code and Credentials Flow for Public Clients](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_authcodecreds_singlepageapp.htm&type=5&language=en_US) - [Authorization Code and Credentials Flow for Private Clients](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_authorization_code_credentials_flow.htm&type=5&language=en_US) - [OAuth 2.0 for First-Party Applications: Headless Username-Password Flow for Private Clients](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_auth_challenge_username_password.htm&type=5&language=en_US) ## Configure Settings for Login with Any Identifier and One-Time Password To configure passwordless login with an identifier of your choice instead of a username, use the Headless Identity API version of the headless passwordless login flow or the OAuth 2.0 for First-Party Applications version. During these flows, users get an email or SMS containing a one-time password (OTP) that they use to complete login. For both flows, headless user discovery is enabled when you add the handler. There’s no extra setting to explicitly enable headless user discovery. 1. From Setup, in the Quick Find box, enter Sites, and then select **All Sites**. 2. To access Experience Workspaces, next to your site name, click **Workspaces**. 3. Select **Administration**, and then select **Login & Registration**. 4. Under Headless User Discovery, click ![Lookup](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/resources-global/_corporate/images/lookup.png) and select an Apex class that implements the `Auth.HeadlessUserDiscoveryHandler` interface. Or, to generate a template, click **Create a headless user discovery handler template**. Edit the template later. 5. For Run As, click ![Lookup](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/resources-global/_corporate/images/lookup.png) and select a system user to execute the handler. We recommend that you don’t select a user account that’s associated with a person. 6. If necessary, configure other settings for the flow that you’re using. - For the Headless Identity API version, see [Configure Experience Cloud Settings for Headless Passwordless Login](https://help.salesforce.com/s/articleView?id=xcloud.headless_passwordless_login_settings.htm&type=5&language=en_US). - For the OAuth 2.0 for First-Party Applications version, see [OAuth 2.0 for First-Party Applications: Configure Experience Cloud Settings](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_auth_challenge_experience_settings.htm&type=5&language=en_US). 7. Save your settings. To continue setting up passwordless login, see these resources, depending on your flow. - [Headless Passwordless Login Flow for Public Clients](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_headless_passwordless_login_public_clients.htm&type=5&language=en_US) - [Headless Passwordless Login Flow for Private Clients](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_headless_passwordless_login_private_clients.htm&type=5&language=en_US) - [OAuth 2.0 for First-Party Applications: Headless Passwordless Login for Private Clients](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_auth_challenge_passwordless_login.htm&type=5&language=en_US) ## Configure Settings for Password Reset with Any Identifier To configure a password reset process with any identifier instead of a username, use headless user discovery with the Headless Forgot Password Flow. During this flow, users enter the identifier and then receive an email or SMS with a one-time password (OTP). To verify their identity, they enter the OTP and then set their new password. 1. From Setup, in the Quick Find box, enter Sites, and then select **All Sites**. 2. To access Experience Workspaces, next to your site name, click **Workspaces**. 3. Select **Administration**, and then select **Login & Registration**. 4. Under Headless Forgot Password, select **Use the headless user discovery handler for this flow**. 5. Under Headless User Discovery, click ![Lookup](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/resources-global/_corporate/images/lookup.png) and select an Apex class that implements the `Auth.HeadlessUserDiscoveryHandler` interface. Or, to generate a template, click **Create a headless user discovery handler template**. Edit the template later. 6. For Run As, click ![Lookup](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/resources-global/_corporate/images/lookup.png) and select a system user to execute the handler. We recommend that you don’t select a user account that’s associated with a person. 7. If necessary, configure other settings for the forgot password flow. See [Configure Experience Cloud Settings for the Headless Forgot Password Flow](https://help.salesforce.com/s/articleView?id=xcloud.configure_headless_forgot_password_flow.htm&type=5&language=en_US). 8. Save your settings. To continue setting up the forgot password flow, see [Headless Forgot Password Flow](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_headless_forgot_password_flow.htm&type=5&language=en_US).