---
schema_version: "1"
id: cc22962f985cb2fffc9eaee65983d4baba5c6140467bf1a80357a430229ae820
title: Create an Apple Auth. Provider in Salesforce for a Mobile Publisher App
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/branded_apps_apple_id_auth_provider.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_apple_id_auth_provider.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 41d7edd3c78f5cf94938e3911c5c2f4f10ae6f080c81392e7ee8cfefe5f5eae9
description: Configure your org to recognize Apple as the external authentication provider.
products:
  - Experiences
  - Mobile App
  - Cross Cloud
release: "264"
---
# Create an Apple Auth. Provider in Salesforce for a Mobile Publisher App

Configure your org to recognize Apple as the external authentication provider.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col style="width:100%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Setup for Mobile Publisher available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Setup for Mobile Publisher available in: production only (not sandbox)</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in Lightning Experience in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d8306e70">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d8306e70 ">To create and modify a Mobile Publisher project:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d8306e70 ">Manage mySalesforce Apps</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d8306e70 ">To view the settings:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d8306e70 ">View Setup and Configuration</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d8306e70 ">To edit the settings:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d8306e70 ">
              <p>Customize Application </p>
              <p style="margin-bottom:0;">AND</p>
              <p style="margin-bottom:0;"> Manage Auth. Providers</p>
            </td>

          </tr>
        </tbody>
      </table>

You’re prompted for the Team ID and Services ID that you created from your Apple developer account.

1. From Setup, enter Auth. Providers in the Quick Find box, then click **Auth. Providers**.
2. Click **New**.
3. For Provider Type, select **Apple**.
4. Enter a name for your Auth. Provider.
5. Enter a URL suffix, which is used in the client configuration URLs. For example, if the URL suffix of your provider is MyAppleProvider, your SSO URL is similar to https://mydomain\_url or site\_url/services/auth/sso/MyAppleProvider.
6. Enter the Team ID from Apple. It appears on the Apple App ID configuration page.
7. Enter your Services ID from Apple. It appears on the Services ID configuration page under the Identifier field.
8. Create Key ID and Key according to [Create a private key to access a capability](https://help.apple.com/developer-account/#/devcdfbb56a3) in Apple Help.
    1. From Apple, create a private key, choosing Sign In with Apple capability. Apple generates a Key ID, which appears on Apple’s Key Details page.
    2. From Apple’s Key Details page, download an Apple-generated file to your computer. This file, which ends in .p8, contains a private key used to sign your JSON authentication tokens.
        
        ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png)
        
        Note Be sure to download the key—even though Apple’s instructions suggest downloading the key is optional. Salesforce requires the key.
    3. Return to your Salesforce Auth. Provider Setup page. Click **Upload Key**, and select the .p8 file.
9. For Default Scopes, enter the scopes to send along with the request to the authorization endpoint. See Apple Developer Help for Apple’s default scopes.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-branded_apps_exp_cloud-264-0-0-production-enus/cf85363c-215e-4784-bb6a-c5c83c4e7140/images/icon_note.png)
    
    Note If you don’t supply default scopes, Salesforce uses `email name`.
10. To direct callbacks to your subdomain instead of login.salesforce.com, select **Use subdomain in callback URLs**.
11. For Custom Error URL, enter the URL for the Apple provider to use to report any errors.
12. For Custom Logout URL, enter a URL to provide a specific destination for authenticated users after they log out.
13. To establish a registration handler, click **Automatically create a registration handler template**. Later, you modify the registration handler for Apple.
14. For Execute Registration As, select an admin that runs the Apex handler class.
15. To use a portal with your provider, select the portal from the Portal dropdown.
16. For Icon URL, select **Choose one of our sample icons** to open a list of available icons. Select an Apple icon, copy the URL, and then enter it under Icon URL.
    
    This icon shows up on your site’s login page. Users click it to log in with their Apple ID.
17. Click **Save**.

Salesforce displays the Auth. Provider details page, which lists the client configuration URLs generated after creating the Apple auth. provider. See [Auth. Provider Client Configuration URLs for Mobile Publisher Apps](https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_apple_id_config_urls.htm&release=264.0.0&type=5 "When you create an Apple Auth. Provider in Salesforce for your Mobile Publisher app, Salesforce generates important client configuration URLs.").