Custom Apple Identity Provider: Bread & Butter

Step 1

Sign in to your Apple Developer account:

https://developer.apple.com/

If you are not part of the Apple Developer Program, follow Apple's guide to enrollment.

Step 2

Click on Account at the right of the top menu.
Under Certificates, IDs & Profiles, click on Identifiers.

Step 3

Click the blue + button to add a new identifier.

Step 4

Select App IDs and click Continue.

Step 5

For type, select App and click Continue.

Step 6

For Description, enter your organization's name.
For Bundle ID, enter a reverse-domain name style string (i.e., com.yourdomainname).
Copy and store your Team ID, this will be used in the last step.

Step 7

Under Capabilities, check "Sign in with Apple".
Click Continue at the top of the page.

Step 8

Confirm your information and click Register.

Step 9

Navigate to Services IDs by using the dropdown on the right.
Then click the blue + button next to Identifiers to add a new identifier.

Step 10

Select Services ID and click Continue.

Step 11

Add a Description and Identifier (must be different than your App ID description and Bundle ID. Try adding ".app" at the end).
Copy and store the identifier value for the last step. It will be your Application (client) ID.
Click Continue.

Step 12

Confirm your information and click Register.

Step 13

Click on your Service ID that you just created.

Step 14

Select Sign in with Apple.
Click Configure beside Sign in with Apple.

Step 15

Select the App ID you created as the Primary App ID.
For Domains and Subdomains, enter

api.breadbutter.io
For Return URLs, enter

https://api.breadbutter.io/callback
Click Next.
Confirm your web authentication configuration and click Done.

Step 16

Click Continue on the Services ID page.
Click Save to confirm your settings and return to the main menu.

Step 17

In the left menu, select Keys.
Click the blue + button to add a new key.

Step 18

Set a name.
Select Sign in with Apple.
Click Configure.

Step 19

For Primary App ID, select your app ID.
Click Save.

Step 20

On the "Register a New Key" page, click Continue.
Confirm your information and click Register.

Step 21

Copy and store your Key ID for the next step.
Download your Key. Your key can only be downloaded once.

Step 22

BreadButter Setup:

Go to breadbutter.io
Click Sign In and authenticate (or Sign Up make a new account and authenticate).
Go to Settings in the left menu.
Click on Apple under SSO Settings > Social Accounts.
Select "Set Apple for Production".
Enter a custom name and description.
Enter the Key ID from Step 18.
Enter the Application (client) ID from Step 10.
Enter the Team ID from Step 5.
Enter the Key from Step 18 - Don't include END/BEGIN tags.
Click Save.
Click the checkbox next to your new Apple provider to enable it.

NOTE: When editing an existing Apple custom provider, the Key ID, Team ID, and Key will not be displayed. However, you can expand the fields to edit them if needed, but you will need to update all 3 fields to submit.