Apple external IDP

Apple can provide identity data during the onboarding and authentication processes. Apple is considered a social identity provider. It is available in the Identity Broker for authentication. During onboarding, Apple can be ingested in User Journey Orchestration.

The Apple social connection allows users to log in to your application using their Apple account. The Apple App Store Developer guidelines require Sign In With Apple (SIWA) to be available in applications that only use third-party sign-in options, such as Facebook or Google.

Request Sign in with Apple at Apple

Apple also described this registration process.

Prerequisites

This process requires:

• An Apple developer program account

Create an app ID at Apple

1. Log in to the Apple developer portal using your Apple developer account.

2. Go to your account.

3. Under Certificates, IDs & Profiles open Identifiers.

4. Click the + (plus sign).

5. On the Register a New Identifier page, ensure that App IDs is selected and click Continue.

6. Select a type: App.

7. Enter a description and a bundle ID.

8. Scroll down through the Capabilities list and select Sign In with Apple.

9. Save your changes.

Create a services ID

1. To return to Identifiers, click All Identifiers.

2. In the drop-down list on the right, select Services IDs.

3. Click the + (plus sign).

4. On the Register a New Identifier page, ensure that Services IDs is selected and click Continue.

5. Set the name of the app as the Description, and an identifier. Users see this description during the login flow. The identifier is used as the BundleID in the Identity Broker configuration.

6. Open the Service ID you just registered and enable Sign in with Apple. Select Configure.

7. Select the AppID that you created. And add your tenant domain and callback URL, which looks like https://<tenant-domain>/broker/authentication/callback.

8. Save your changes.

Create a signing key

1. In the menu on the left, open the Keys.

2. Click the + (plus sign).

3. Add a keyname and enable Sign in with Apple below. Select Configure.

4. Select the AppID of the application that you created.

5. Save your changes.

6. Continue and register. Download your key and copy the KeyID.

Configure Sign in with Apple in the Identity Broker

1. Click Add identity provider and select Sign in with Apple.

   In a typical scenario, you fill in the following information on the connection level:

   • Display name: Sign in with Apple (just an example)
   • Active: Select the check box
   • BundleID: The Services ID that you created
   • TeamID: Add your Apple Team ID. In the Apple Developer Console top-right menu, navigate to View Membership > Membership > Team ID.
   • KeyID: The KeyID of the key that you generated
   • Private key: The key that you downloaded

Variant

You always need at least one variant. For Sign in with Apple, you only need to configure a variant name, such as Authentication.