Registering an Apple service

To allow PingFederate to process social sign-on requests with Apple, add PingFederate as a Sign in with Apple service on the Apple Developer site.

About this task

You can find official Apple documentation and troubleshooting suggestions in Configure Sign in with Apple for the web in the Apple Developer documentation.

Sign on to the Apple Developer site with an Apple Developer administrator account.
On the Certificates, Identifiers & Profiles → Identifiers page, next to the Identifiers heading, click +.
On the Register a new identifier page, select Services IDs. Click Continue.
On the Register a Services ID page, in the Description field, enter a description for your application.
In the Identifier field, enter a name for your application, such as com.example.mywebservice. You will use this as the Services ID in Configuring an adapter instance. Click Continue. Click Register.

This is different from the bundle ID that you entered in Registering an Apple app.
On the Identifiers page, select the service that you created.
On the Edit your Services ID Configuration page, select Sign in with Apple. Click Configure.
On the Web Authentication Configuration modal, from the Primary App ID list, select the app that you registered in Registering an Apple app.
In the Register Website URLs section, in the Domains and subdomains field, enter the domain or domains for your web application, such as example.com.
In the Return URLs field, enter the Apple IdP Adapter callback endpoint on your PingFederate server, based on the following: https://pf_host:pf_port/ext/apple-authn. Click Next. Click Done.
Click Continue. Click Save.