The following are known issues or limitations for the Apple Cloud Identity
Connector.
Known issues
There are no known issues.
Known limitations
- Sign in with Apple ID does not create a session in the browser, so sign in is required every time and there is no single logout function.
- Apple handles scope requests in a unique way:
- The
email
scope behaves as follows:- If you request this scope the first time a user signs on, Apple will return the email address. If you then request this scope at a later time, Apple will return the email address.
- If you do not request this scope the first time a user signs on, Apple will not return the email address. If you then request this scope at a later time, Apple will not return the email address.
- The
name
scope behaves as follows:- If you request this scope the first time a user signs on, Apple will return the name. If you then request this scope at a later time, Apple will not return the name.
- If you do not request this scope the first time a user signs on, Apple will not return the name. If you then request this scope at a later time, Apple will not return the name.
- If you need these attributes, have your application capture and store the values.
- To reset these scenarios, the user has to manually revoke permissions from your application and then sign in again.
- The