My client is developing a React Native mobile app that is supposed to use SF REST API on behalf External Identity users. They want a native login system, because OAuth flow is clunky (it opens an external browser and the session expires).

During pre-sales SF used Louie Vuitton website as an example for my client. They said that it uses External Identity under the hood, and that website features a custom form for login/password input.

How do I achieve this? It's said in the docs that "Experience Cloud supports all available authorization flows, except for the username-password OAuth authorization flow", but LV clearly worked around that.

Username-password flow is working with Admin credentials, but returns the following when I'm passing and Ext Idty credentials:

  "error": "invalid_grant",
  "error_description": "authentication failure"

Setting IP range as described here didn't help me.

  • In your React Native mobile app, you could make a SOAP API login request instead Dec 20, 2021 at 13:50
  • @BryanAnderson Doesn't work for me either. I think it expects the security token which isn't feasible. "INVALID_LOGIN: Invalid username, password, security token; or user locked out."
    – Al Cher
    Dec 20, 2021 at 14:11
  • You may want to try User-Agent flow help.salesforce.com/s/… Dec 20, 2021 at 21:36
  • @BryanAnderson it's not the same, user-agent still feature an SF-hosted login page
    – Al Cher
    Sep 8, 2022 at 11:33

1 Answer 1


As of Winter '23 Salesforce provides Credentials Flow which covers this use case. Another possibility I see is using JWT but haven't explored it in detail.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .