Custom Apple Identity Provider: Bread & Butter IO

Step 1

Sign in to your Apple Developer account:

https://developer.apple.com/

If you are not part of the Apple Developer Program, follow Apple's guide to enrollment.

Step 2

On the left pane, click Certificates, IDs & Profiles, then select Identifiers.
Click the blue + button to add a new identifier.

Step 3

Select App IDs and click Continue.

Step 4

For type, select App and click Continue.

Step 5

For Description, enter your organization's name.
For Bundle ID, enter a reverse-domain name style string (i.e., com.domainname.appname).
Copy and store your Team ID, this will be used in the last step.

Step 6

Under Capabilities, check "Sign in with Apple".
Click Continue.

Step 7

Confirm your information and click Register.

Step 8

Navigate to Services IDs by using the dropdown on the right.
Click the blue + button to add a new identifier.

Step 9

Select Services ID and click Continue.

Step 10

Add a Description and Identifier (must be different than your App ID description and Bundle ID).
Copy and store this value for the last step. It will be your Application (client) ID.
Click Continue.

Step 11

Confirm your information and click Register.

Step 12

Click on your Service ID that you just created.

Step 13

Select Sign in with Apple.
Click Configure beside Sign in with Apple.

Step 14

Select the App ID you created as the Primary App ID.
For Domains and Subdomains, enter

api.breadbutter.io
For Return URLs, enter

https://api.breadbutter.io/callback
Click Next.
Confirm your web authentication configuration and click Done.

Step 15

On the left pane, select Keys.
Click the blue + button to add a new key.

Step 16

Select Sign in with Apple.
Click Configure.

Step 17

For Primary App ID, select your app ID.
Click Save.
Confirmed your information and Register.

Step 18

Copy and store your Key ID for the next step.
Download your Key. Your key can only be downloaded once.

Step 19

BreadButter Setup:

Go to breadbutter.io
Click Sign In and authenticate (or Sign Up make a new account and authenticate).
Go to Settings in the left menu.
Click on Apple under SSO Settings > Social Accounts.
Select "Set Apple for Production".
Enter a custom name and description.
Enter the Key ID from Step 18.
Enter the Application (client) ID from Step 10.
Enter the Team ID from Step 5.
Enter the Key from Step 18 - Don't include END/BEGIN tags.
Click Save.
Click the checkbox next to your new Apple provider to enable it.

NOTE: When editing an existing Apple custom provider, the Key ID, Team ID, and Key will not be displayed. However, you can expand the fields to edit them if needed, but you will need to update all 3 fields to submit.