Salesforce Docs Portal

Auth. Provider Client Configuration URLs for Mobile Publisher Apps

When you create an Apple Auth. Provider in Salesforce for your Mobile Publisher app, Salesforce generates important client configuration URLs.

Required Editions

Setup for Mobile Publisher available in: Lightning Experience
Setup for Mobile Publisher available in: production only (not sandbox)
Available in Lightning Experience in: Enterprise, Performance, and Unlimited Editions
Apple auth. provider return URLs

Test-Only Initialization URL

Use this URL to ensure that the third-party provider is set up correctly. The admin opens this URL in a browser, signs in to Apple, and is redirected back to Salesforce with a map of attributes.

Important
Important To test your app’s SSO connection, open the Test-Only Initialization URL in a browser. When you’re redirected to the Apple Account page, sign in with your credentials. After you log in, Apple asks you to authorize your app. After you authorize your app, you’re redirected back to Salesforce.

Single Sign-On Initialization URL

Use this URL to perform SSO into Salesforce from Apple (using Apple credentials). The user opens this URL in a browser and signs in to the third party. Apple either creates a user or updates an existing user. Then Apple signs the user into Salesforce as that user.

Existing User Linking URL

Use this URL to link existing Salesforce users to their Apple account. The user opens this URL in a browser, signs in to Apple, logs in to Salesforce, and approves the link.

OAuth-Only Initialization URL

Use this URL to obtain OAuth access tokens for Apple. Users must authenticate with Salesforce for the Apple service to get a token. This flow doesn’t provide for future SSO functionality.

Callback URL

Use this URL for the endpoint that the Sign In with Apple service uses to call back to Salesforce. Apple redirects to the callback URL with information for each client configuration URL.

Important
Important You must update your app’s Apple configuration with the Callback URL. After creating the Apple authentication provider in Salesforce, return to your Services ID configuration page in Apple App Store Connect, and then update the Return URL to use the Callback URL generated in Salesforce.