Headless Salesforce & APIs

Headless Salesforce & APIsUse Salesforce as a headless backend: API landscape, OAuth & External Client Apps, REST/Composite, GraphQL, Bulk API 2.0, Pub/Sub API and integration architecture.

The Salesforce API Landscape: A map of every major Salesforce API, what "headless Salesforce" really means, and how versions, limits, integration users and error handling work across them, so you pick the right API before you write a line of integration code.

Authentication: OAuth 2.0, Connected Apps and External Client Apps: How clients obtain and manage Salesforce tokens: OAuth 2.0 and OpenID Connect fundamentals, External Client Apps versus Connected Apps, every supported flow with real requests, scopes, policies, token lifecycle and secret management.

REST and Composite APIs: Master the Salesforce REST API and its composite resources: CRUD, upsert by external ID, SOQL pagination, search, files, Composite, Batch, Tree, sObject Collections and Composite Graph, with production-grade Node.js and Python clients and an end-to-end order sync.

GraphQL API and UI API: Build user-facing headless experiences on Salesforce: query exactly the data you need with the GraphQL API (filters, ordering, pagination, relationships, aggregates and mutations) and render metadata-driven forms that respect layouts, picklists and field-level security with UI API.

Bulk API 2.0 and Large Data Volumes: Move millions of records in and out of Salesforce with Bulk API 2.0 ingest and query jobs, and design orgs that stay fast at large data volumes: skew, selectivity, indexes, skinny tables, archiving and deletion.

Pub/Sub API and Event-Driven Integration: Subscribe to and publish platform events, Change Data Capture and real-time monitoring events over gRPC with the Pub/Sub API. Covers flow control, replay, Avro decoding, CDC headers, Event Relay, allocations, and how to build reliable, idempotent event-driven integrations.

Building Headless Apps on Salesforce: Reference architectures for using Salesforce as the backend of web, mobile, service and AI clients. Covers how to choose an identity model, a full Next.js App Router example (PKCE login, server-side tokens, GraphQL, Apex REST, live updates via Pub/Sub and server-sent events), Mobile SDK, Heroku AppLink, headless agents and MCP, licensing, rate limits and operations.

Integration Patterns and Architecture: Apply Salesforce's integration pattern catalog (request-reply, fire-and-forget, batch sync, remote call-in, UI updates, data virtualization) using the right platform features. Covers Salesforce Connect, MuleSoft API-led connectivity, reliability (idempotency, retries, dead letters), system-of-record decisions, integration security and monitoring, with an end-to-end ERP and e-commerce case study.

With Sharing needs JavaScript to run. Turn it on to browse the catalogue and read lessons.