<!--
{
  "availability" : [

  ],
  "documentType" : "symbol",
  "framework" : "AccountOrganizationalDataSharing",
  "identifier" : "/documentation/AccountOrganizationalDataSharing",
  "metadataVersion" : "0.1.0",
  "role" : "Framework",
  "symbol" : {
    "kind" : "Framework",
    "modules" : [
      "Account & Organizational Data Sharing"
    ],
    "preciseIdentifier" : "AccountOrganizationalDataSharing"
  },
  "title" : "Account & Organizational Data Sharing"
}
-->

# Account & Organizational Data Sharing

Provide people with the ability to authorize your apps and websites that access information about them on Apple REST services, like Roster API.

## Overview

With [OAuth 2.0](https://datatracker.ietf.org/doc/html/rfc6749), Account & Organizational Data Sharing gives your users a safe way to authorize your apps and websites to access information about them on Apple services, for example <doc://com.apple.documentation/documentation/RosterAPI>.

## Topics

### Generating tokens

[Creating a client secret](/documentation/AccountOrganizationalDataSharing/creating-a-client-secret)

Generate a signed token to identify your client application.

[`Fetch Apple's public key for verifying token signature`](/documentation/AccountOrganizationalDataSharing/Fetch-Apple's-public-key-for-verifying-token-signature)

Retrieve the public key associated with the cryptographic identity Apple uses to sign the token.

[`Generate and validate tokens`](/documentation/AccountOrganizationalDataSharing/Generate-and-validate-tokens)

Validate an authorization grant code delivered to your app to obtain tokens, or validate an existing refresh token.

### Using and revoking tokens

[`Request an authorization`](/documentation/AccountOrganizationalDataSharing/Request-an-authorization)

Request a user authorization to Account & Organizational Data Sharing apps and web services.

[`Token revocation`](/documentation/AccountOrganizationalDataSharing/Revoke-tokens)

Invalidate the tokens and associated user authorizations for someone when they are no longer associated with your app.

### Common objects

[`object JWKSet`](/documentation/AccountOrganizationalDataSharing/JWKSet)

A set of JSON web keys.

[`object TokenResponse`](/documentation/AccountOrganizationalDataSharing/TokenResponse)

The response token object returned on a successful request.

[`object ErrorResponse`](/documentation/AccountOrganizationalDataSharing/ErrorResponse)

The error object returned after an unsuccessful request.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)