---
schema_version: "1"
id: eb8678a207670915b2692aeb83605b4de1c0989b878bdf0df74a03ab9d5dc9ae
title: Set Up an External Client App for Headless Identity
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/security/headless-identity-impl-guide/guides/headless-identity/headless-identity-connected-app-overview.md
canonical_url: https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-connected-app-overview.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 5d390d499e0fa0d801bfe64e6f1ebf006d4bdcc25062a82ad90497c30b23c30c
products:
  - Headless Identity Implementation Guide
  - Security
---

# Set Up an External Client App for Headless Identity

The external client apps framework enables your off-platform app to request data from Salesforce APIs. To integrate your single-page app with Headless Identity APIs, create an external client app and configure its settings and access policies.

|Required Editions|
|-----------------|
|Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience|
|Available in: **Enterprise**, **Unlimited**, and **Developer** Editions|

As part of the external client app setup, you enable the Authorization Code and Credentials Flow. With this flow, you can set up headless login. Enabling this flow is also a prerequisite for enabling headless registration. You also define what Salesforce data your app can access with scopes and configure other security settings and access policies. And you define a callback URL, which you use as the `redirect_uri` parameter during headless flows.

After you create an external client app, you get a consumer key, or `client_id`. During headless flows, your app passes the consumer key to Salesforce to identify itself.

-   **[Create an OAuth-Enabled External Client App](https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-create-connected-app.md)**  


    Create your external client app for headless identity, add the required scopes, and enable the Authorization Code and Credentials flow at the app level.

-   **[Configure External Client App Policies](https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-connected-app-policies.md)**  


    In a standard OAuth flow, users often see an approval page where they confirm that an external client app is allowed to access their Salesforce data. With headless identity flows, you don’t want to show users a Salesforce approval page. To preapprove access, configure OAuth policies on your external client app.

-   **[Get Your Consumer Key](https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-get-consumer-key.md)**  


    When you create an external client app, it generates a consumer key, also known as a client ID. This value allows Salesforce to identify your third-party app during headless identity flows. Learn how to get your consumer key so that you can use it when configuring headless flows.