Sign in with Apple

What this connects

Application sign-in to Apple ID authentication.

Supported workflows

• User sign-in on iOS and web
• Account creation with a private relay email

Data exchanged

• Apple user identifier
• Email address, which may be a private relay address
• Authentication tokens

Setup requirements

• An Apple Developer account
• A configured Service ID and key
• Verified return URLs

Permissions required

• Basic identity, plus email if the user chooses to share it

Security and privacy

• Data is transmitted over encrypted connections (TLS).
• No password reaches the application — authentication happens at Apple.
• Users may hide their real email; the private relay address must be treated as their contact address.

Known limitations

Stated plainly, because finding these out during implementation is worse than knowing them now.

• Apple requires this option wherever an iOS app offers other third-party sign-in methods.
• Users who hide their email can only be contacted through Apple's relay.