Sign In With Apple and Azure AD B2C

Hi,


I'm currently working on an application on which wa are wandering if we shall implement Sign In With Apple.


The user needs to have an account to use the application which is managed by Azure AD B2C with Open ID Connect.
At first launch, the user signs up to create his account, and next times, he can use his existing account to sign in.


The App Store guidelines mention in the paragraph 4.8 Sign in with Apple:

"Apps that exclusively use a third-party or social login service (such as Facebook Login, Google Sign-In, Sign in with Twitter, Sign In with LinkedIn, Login with Amazon, or WeChat Login) to set up or authenticate the user’s primary account with the app must also offer Sign in with Apple as an equivalent option. A user’s primary account is the account they establish with your app for the purposes of identifying themselves, signing in, and accessing your features and associated services."


In my team, we've already investigated on using Azure AD B2C as a federated identity provider, that can interact with Sign In With Apple but with some limitations as we're unable to retrieve user email even if the user has chosen to provide a randomly generated email.


So before investigating further, and as the App Store guideline mentionned above is ambiguous, my first question is: in my case, is Azure AD B2C considered as a third-party service and Sign In With Apple is mandatory ? Or as Azure AD B2C is exclusively used to setup user account, do I meet the critera which does not require Sign In With Apple "Your app exclusively uses your company’s own account setup and sign-in systems." ?


Thank you for help

Replies

Not Apple but from my understanding, Apple means if your app shows "login with..." where ... is another identity provider that's not your company (ie, facebook, google, etc), then you are required to have "sign in with Apple". I think they mean from users' perspective, if there's alternative login method, then, you are required to support "sign in with Apple"

AADB2C is how you implement, it is NOT a 3rd party identity service. That said, if you implemented AADB2C with Microsoft Account (which is a 3rd party identity service), then, you are required to support "sign in with Apple"