To allow PingFederate to process social sign-on requests with Apple, add PingFederate as an OpenID Connect application in the Apple administrative console.
PingFederate uses the resulting private key to sign the client secret JWT that it sends to Apple.