1. Guides
  2. /
  3. Connect to an external identity provider (IdP)
  4. /
  5. Social Identity Provider
  6. /
  7. Apple Mobile

Apple Mobile Login

Update Time: 2022-06-24 19:13:49
Edit

Introduction

  • Overview: Apple social login is a user who uses Apple as the identity provider to securely log in to a third-party application or website. By configuring and enabling Apple's social login in Authing, you can quickly obtain basic open information of Apple through Authing and help users achieve password-free login.
  • Application scenarios: PC website
  • End-User Preview:

Precautions

Step 1: Configure in the Apple Developer Center

Get Team ID

Go to the Membership page (opens new window) of the Apple Developer Portal (opens new window) and record the Team ID:

Create an App ID

  1. On the Apple Developer Portal, Certificates, Identifiers & Profiles > Identifiers page, click the ➕ icon to create an app:

  1. Select App IDs and click the Continue button to continue:

  1. Select the application type and click the Continue button to continue:

  1. To complete the application Description and Bundle ID, record the Bundle ID:

  1. Finally, click the Continue button, confirm the information in the opened page, and click the Register button to create the application.

Create a Service ID

  1. Go back to Certificates, Identifiers & Profiles > Identifiers, and click the ➕ icon, select Services IDs and click the Continue button to continue:

  1. Fill in the Description and Identifier, then click the Continue button, and click the Register button on the confirmation page that opens to create the Service:

  1. Locate the service you just created, check Sign In with Apple, click Configure:

  1. Fill in Domains and Subdomains and Return URLs:
  • Domains and Subdomains: Please fill in core.authing.cn
  • Return URLs: Please fill in https://core.authing.cn/connection/social/{Unique Identifier}/{YOUR_USER_POOL_ID}/callback, and replace {Unique Identifier} with the Unique Identifier of the identity provider you are creating by Authing, { YOUR_USER_POOL_ID} with your UserPool ID
  1. Click Save, Continue, and finally Register, and record the Service ID.

Configure Signing Key

  1. Go back to the Certificates, Identifiers & Profiles page, switch to the Keys Tab, and click the ➕ icon:

  1. Enter a name and check Sign in with Apple, click Configure to make sure the Primary App ID you selected is the one you just created:

  1. Click Save, Continue, and finally Register.

  1. Once created, record the Key ID and click Download to download the key:

Step 2: Configure Apple in the Authing Console

2.1 On the "Social" page of the Authing Console, click the "Create Connection" button to enter the "Choosing a Social Identity Source" page.

2.2 On the "Choosing a Social Identity Source" page, click the "Apple" card.

2.3 Continue to click the "Apple Web" login mode, or click "... Add".

2.4 On the "Apple Web" configuration page, fill in the relevant field information.

FieldDescription
Unique Identifiera. The unique identifier consists of lowercase letters, numbers, and -, and the length is less than 32 digits.
b. This is the unique identifier of this connection and cannot be modified after setting.
Display NameThis name will be displayed on the button on the end user's login screen.
Services IdentifierApple Service ID
Team IDApple Team ID.
Key IDApple Signing Key ID.
KeyContents of the Apple Signing Key.
ScopesName and Email Address can be checked.
Login ModeAfter enabling the "Login Only Mode", you can only log in to an existing account and cannot create a new account. Please choose carefully.
Account Identity AssociationWhen "Account Identity Association" is not enabled, a new user is created by default when a user logs in through an identity provider. After enabling "Account Identity Association", you can allow users to directly log in to existing accounts through "Field Matching" or "Ask Binding Mode".

2.5 After the configuration is complete, click the "Create" or "Save" button to complete the creation.

Step 3: Development access

  • Recommended development access method: Use a hosted login page

  • Description of advantages and disadvantages: The operation and maintenance are simple, and Authing is responsible for the operation and maintenance. Each user pool has an independent second-level domain name; if you need to embed it into your application, you need to use the pop-up mode to log in, that is: after clicking the login button, a window will pop up, the content is the login page hosted by Authing, or the browser The server redirects to the login page hosted by Authing.

  • Detailed access method:

    3.1 Create an application in the Authing Console. For details, see: How to create an application in Authing

    3.2 On the created "Apple Web" identity provider connection details page, open and associate an application created in the Authing Console

    3.3 Click the "Experience Login" button of the app in the Authing Console, and experience the "Apple Web" login in the pop-up login window