Application integrity

In the IDAAS-core configuration, you can select one of the two app integrity levels:

• FULL: The iOS SDK will perform several checks for the app, including a tampering and modification check, by validating the application signature of the app. The application signature used by the iOS app is the app ID obtained by the iOS SDK at runtime during the DCR and it is verified against the app ID (application signature) stored in the IDAAS-core. To obtain the app ID for the IDAAS-core configuration use the guide below.
• NONE: The iOS SDK will perform only the most basic additional sanity checks like the app's name verification.

Obtaining the app ID

The app ID is unique for every app. It consists of a unique team ID generated by Apple and the bundle ID of the app supplied by you. You can find more info about the app ID in the Apple documentation. The app ID used for an integrity check needs to be explicit (wildcards are NOT allowed). Once you obtain the app ID (such as A1B2C3D4E5.com.domainname.applicationname) you can store it in the IDAAS-core.

Storing the app ID

The app ID that is obtained must be stored in the IDAAS-core admin console. Since the app ID might theoretically change (app is distributed under a different bundle ID or different app developer), therefore every application version has its own configuration.