Apple Account authorization instead of app-specific-password

Apple's app-specific password support article says:

"For supported third-party apps that access your iCloud Mail, Calendar, and Contacts, you can authorize the app using your Apple Account instead of using an app-specific password."

I can't find any documentation about (1) what makes an app "supported," (2) how to apply or qualify, or (3) the technical mechanics — Sign in with Apple, OAuth scopes, MDM, etc.

I'm building an iOS app (already approved for Gmail with the gmail.modify scope and CASA-assessed) that monitors a user's mailbox for scam emails with their explicit consent. I'd love to offer the same to iCloud Mail users without requiring the manual app-specific password flow, if there's a Sign in with Apple-style alternative available.

Has anyone had success applying for this, or can an Apple engineer point to additional documentation? Thanks!

Answered by DTS Engineer in 887140022

I think the droid you’re looking for is Express interest in Auth 2.0 for iCloud Mail, Calendar, and Contacts.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

I think the droid you’re looking for is Express interest in Auth 2.0 for iCloud Mail, Calendar, and Contacts.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Accepted Answer

Thank you.

Thank you for pointing to the “Express interest in Auth 2.0 for iCloud Mail, Calendar, and Contacts” page: https://developer.apple.com/contact/request/icloud-oauth2/

I’m developing a native iOS calendar app as an individual developer. When I sign in with my current free developer account and open that link, I see “Your account can’t access this page.”

Before paying the USD 99 annual Apple Developer Program membership fee, I would like to clarify:

  1. Does enrolling in the paid Apple Developer Program guarantee eligibility to integrate iCloud OAuth into my app, or does it only provide access to an interest/application form, followed by a separate approval process?
  2. If separate approval is required, what are the eligibility criteria? Can individual developers with an app that has not yet been released on the App Store apply?
  3. Is there a way to confirm eligibility before purchasing the membership?
  4. For an approved app, does iCloud Calendar authorization support event invitations and attendee responses, calendar sharing and participant permissions, and event attachment upload/download/removal? Are there additional restrictions or approvals for these operations?
  5. Where can I find the integration documentation and supported authorization scopes?

Our app currently uses EventKit for calendar access. We understand that this is different from direct iCloud authorization, and that ordinary Sign in with Apple does not grant access to iCloud Calendar data.

The availability and scope of this authorization will affect our app’s feature set and architecture, so we would appreciate clarification on what paid membership guarantees versus what remains subject to separate approval.

Thank you.

Let’s discuss your situation on your specific thread.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Apple Account authorization instead of app-specific-password
 
 
Q