OAuth 2.0 SAML Bearer Assertion Flow for Previously Authorized Apps

Connect to an instance of Salesforce using the OAuth 2.0 SAML Bearer Assertion Flow

  • Authentication through this flow doesn't invoke login flows
  • You can't apply login flows to API logins or to scenarios in which sessions pass to the UI through frontdoor.jsp from a non-UI login process
  • Experience Cloud sites don't support this flow
  • Session Id WILL work with frontdoor.jsp
  • You will get a 420 error code if no other flow with a refresh token has run before
  • Documentation