I have created a Apex Class and exposed the data as a REST API like below.

global with sharing class ReteriveSFAccountData {
    global static void doGet() {

Also created the connected API which allows the API to be accessed via external application and I also created the service account. Currently the client application access the REST API in salesforce by giving the below

enter image description here

I wanted to understand if Salesforce supports anyother grant_type like Client_Credentials other than password. If the Client_credentials is supported what are the header paramters that needs to be passed to get the Access token from Salesforce

1 Answer 1


Salesforce supports a wide variety of OAuth flows. The available flows are documented in here.

Typically, external integrations should be authorized using the User Agent, Web Server, or JWT Flows depending on the specific use case.

  • Does it support client_credentials
    – user81642
    Commented Jun 1, 2020 at 15:05
  • 1
    No, it does not. You must always authorize as a user, but you should not store the user's credentials.
    – David Reed
    Commented Jun 1, 2020 at 15:07

Not the answer you're looking for? Browse other questions tagged .