Sign in with Apple ID

Flows of accounts sign-in

Requirements:

· App implementation to support Apple ID (soon to be mandatory when the 3rd party login option is also used in the same app for iOS)

· Device with iOS 13 or newer installed

· An email account linked to Apple ID with two-factor authentication enabled

Signing in with Apple ID

When the aforementioned criteria is met, the app will automatically offer an option to sign in with an Apple ID alongside other sign-in options (3rd party accounts and/or social media accounts). When a user chooses to sign-in an app with Apple ID, they are presented an option to choose :

· Share the email Use an actual email associated to that user’s Apple ID. It is implied that the user consents to provide and let the app use the real email address in similar manner to other 3rd party account logins (Facebook, Tweeter, Google account, etc.).

· Hide the email the option that will generate a private email unique to an App/Apple ID combination that will receive the email the app would send to the user, they will forwarded to the email associated to Apple ID account and act as a private proxy email layer.

· An option to sign with different full name/username for that particular app

Managing the Apple ID’s authorized apps

The user can manage the app they have signed-in with Apple ID by going to appleid.apple.com and sign in. After that, they can navigate to Security:

Then move down to the bottom and tap Manage under Apps & Websites Using Apple ID. User will see all the apps and websites that are authenticated with Apple ID, select an app and proceed:

1. On the top, this will show the current Email option for the selected app, in case of Hide My Email here, it will show the relay email currently assigned to this app and the email it forwarding to.

2. User can turn on or off forwarding app emails from private relay email.

3. User can revoke the authorization by tapping Stop Using Apple ID. After confirmation, User has to sign in to Apple ID again and now have a choice to change whether User will share or hide the Email linked to Apple ID

Difference between Apple ID and other 3rd party accounts

The only real noticeable difference is the privacy option the Apple ID offers. Apple ID promised to use the name and email of the user for credential verification propose and nothing else. User have the option to turn off the email forwarding from the proxy emails on individual apps. As in other sign in options, the user’s information and email was used not just to login, it also be used in analytics and marketing. Other minor differences depend on how the applications themselves handle the soon-to-be mandatory Apple ID sign-in option.

Additional notes

• When an Apple ID user signed in, signed out and revoke the Apple ID from the security setting. App will still recognize the same Apple ID when this user signs back in as long as this user’s Apple ID is still associate to this app.

• For Hide Email option, when an Apple ID account signed in with an app, removed the Apple ID link from the backend, then use the same Apple ID to sign in the same app, the app backend will still receive the same private relay email provided from Apple.