!!! Overview [{$pagename}] was announced at [Apple]’s Worldwide Developer Conference [2019|Year 2019].[{$pagename}] will be available with [MacOS.10.15] and [IOS.13] !! Requirements [{$pagename}] will require that app developers must implement this single sign-on solution wherever they already offer another [third-party] [Authentication Mechanism]. Apple’s position on the matter is that it wants to give its customers a "more private choice". [{$pagename}] requires users to add [Two-Factor Authentication] to your [Apple ID] account if not already Implemented. [{$pagename}] when on non-[Apple] [devices] will still be a lot like using any other [Single Sign-On] scheme. !! [{$pagename}] [Privacy Enhancing Technologies] [{$pagename}] user's will be able to choose to reveal their [Email Address] or [Apple] will generate a random, but real and verified, [Email Address] for the app in question to use, then will route the emails the app wants to send to that address. The user can choose to disable the [app] email address at any time like — like if they begin to get [spam], for [example]. The ability to create disposable [Email Address] is not new — you can add pluses (+) or dots (.) in your [Gmail] address, for [example], to set up filters to delete emails from addresses that become compromised. Other email providers offer similar features. However, these other systems do not allow you to disable these addresses.!! non-[Apple] Devices On non-Apple devices, [Apple] sends a six-digit code to a trusted device or phone number. !! What is revealed [Applications] The [Application] will only receive * the user’s name associated with their [Apple ID] * the user’s verified email address, or the random email address that routes email to their inbox, * a stable [Unique Identifier] that allows them to set up the user’s account in their system. ** NOt known if this is a persistent [Unique Identifier] over multiple apps or devices.!! Other Details * [{$pagename}] integrates with [iCloud] [KeyChain] * [Developer Guidelines|https://developer.apple.com/design/human-interface-guidelines/sign-in-with-apple/overview/|target='_blank'] ** "you will need to register your outbound email domains." ** [Sign In with Apple REST API|https://developer.apple.com/documentation/signinwithapplerestapi|target='_blank'] !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }] ---- * [#1] - [Sign In with Apple: Learn About the New Identity Provider|https://auth0.com/blog/what-is-sign-in-with-apple-a-new-identity-provider/|target='_blank'] - based on information obtained 2019-06-09 * [#2] - [Answers to your burning questions about how ‘Sign In with Apple’ works|https://techcrunch.com/2019/06/07/answers-to-your-burning-questions-about-how-sign-in-with-apple-works/|target='_blank'] - based on information obtained 2019-06-09 * [#3] - [Make signing in easy.|https://developer.apple.com/sign-in-with-apple/get-started/|target='_blank'] - based on information obtained 2019-06-09 * [#4] - [How Sign in with Apple differs from OpenID Connect|https://docs.google.com/document/d/17ypy1b5TEuoLNfFWFBRZSrI1hgMNSRsKmfLApWLldXA/|target='_blank'] - based on information obtained 2019-06-18 * [#2] - [What the Heck is Sign In with Apple|https://developer.okta.com/blog/2019/06/04/what-the-heck-is-sign-in-with-apple|target='_blank'] - based on information obtained 2019-06-18