How to Enable Apple Sign-In and Generate Required Credentials

How to Enable Apple Sign-In and Generate Required Credentials

To enable Apple Sign-In, you need four credentials from your Apple Developer account: Team ID, Client ID, Key ID, and Private Key. This guide walks you through creating and locating each one, and making sure your app name appears correctly when users sign in.

Requirements

You need an active Apple Developer account at developer.apple.com. You must have the Admin or Account Holder role in your Apple Developer team. Your app's domain or bundle ID must be ready.

How to Enable Apple Sign-In and Generate Required Credentials

1. Sign in at developer.apple.com
   • Click your name/account at the top right and go to Account
   • Under Membership Details, copy your Team ID — it is a 10-character alphanumeric string (example: AB12CD34EF)
2. At at developer.apple.com/account
   • Go to Certificates, Identifiers & Profiles
   • Click on Identifiers
   • Click the + button to add a new identifier
   • Select App IDs and click Continue
   • Select App as the type and click Continue
   • Fill in a Description — use your real app name (example: My App) — this is what will be shown in the iOS sign-in prompt
   • Enter your Bundle ID (example: com.yourcompany.yourapp)
   • Scroll down to Capabilities, find Sign In with Apple and check it
   • Click Continue, then Register
3. Still in Identifiers, click the + button again
   • Select Services IDs and click Continue
   • Fill in a Description — use your real app name (example: My App) — this is what will be shown in the non-iOS sign-in prompt
   • Enter an Identifier — this will be your Client ID (example: com.yourcompany.yourapp.signin)
   • Click Continue, then Register
   • Back in the Identifiers list, click the Services ID you just created
   • Check the box next to Sign In with Apple, then click Configure
   • Under Primary App ID, select the App ID you created in Step 2
   • Under Domains and Subdomains, add your app's domain (example: yourapp.com)
   • Do not include https:// or any paths — the domain only
   • Under Return URLs, paste your exact Return URL
   • To find your Redirect URL: Login in to your whitelabel admin account > Go to Settings > Account > Scroll to “Global Apple Sign In Configuration" > Enable Use Your Own Domain > Copy Redirect URL exactly as shown
   • Paste the URL, then click Next, then Done, then Continue, then Save
   • The Identifier value of this Services ID is your Client ID — copy it
4. In the left menu, click Keys
   • Click the + button to create a new key
   • Enter a Key Name (example: Apple Sign In Key)
   • Check the box next to Sign In with Apple
   • Click Configure next to Sign In with Apple
   • Under Primary App ID, select the App ID you created in Step 2
   • Click Save, then Continue, then Register
   • On the confirmation page, copy the Key ID — it is a 10-character string shown at the top
   • Click Download to download the .p8 file — this is your Private Key
   • This file can only be downloaded once. Store it securely immediately
   • If you lose it, you must revoke the key and create a new one
   • Click Done

Summary — your four credentials:

Credential
Where it comes from

Team ID
Account > Membership Details

Client ID
The Identifier of your Services ID

Key ID
Shown on the key detail page after creation

Private Key
The downloaded .p8 file contents

Why does my app show the wrong name in the iOS sign-in prompt?

This is expected Apple behavior, not a bug. Apple pulls the app name shown in the Sign in prompt from the Primary App ID description, not from the Services ID description. This means:

• On the iOS native flow, the name shown comes from the App ID description linked as the Primary App ID under your Services ID
• On the non-iOS native flow (when the user is redirected to a browser), Apple uses the Services ID description instead — so the name may appear correctly there but not on iOS native
• The app does not need to be published on the App Store for the correct name to appear. The name comes entirely from the App ID description in your Apple Developer portal

Troubleshooting tips:

• Return URL mismatch error: The callback URL under the Services ID configuration must match exactly what your app sends, including https and the full path
• Private key download unavailable: The .p8 file can only be downloaded once. If missed, revoke the key under Keys and create a new one
• Sign In with Apple not showing as a capability: Make sure the App ID was registered with Sign In with Apple enabled in Step 2
• Invalid Client ID: Confirm you are using the Services ID Identifier, not the App ID Bundle ID — they look similar but are different
• Wrong app name on iOS prompt: The name comes from the Primary App ID description, not the Services ID. See the section above to fix it